last executing test programs:

12.540774286s ago: executing program 4 (id=366):
mkdir(&(0x7f00000013c0)='./sys\x00', 0x6)
mount(0x0, &(0x7f0000001400)='./sys\x00', &(0x7f0000001440)='sysfs\x00', 0x0, 0x0)
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x4, 0x0, 0xd})
r0 = openat(0xffffffffffffff9c, &(0x7f00000016c0)='./sys/class/net/bridge0/bridge/vlan_protocol\x00', 0x1, 0x0)
write(r0, &(0x7f0000001700)='0', 0x1)

12.174628706s ago: executing program 4 (id=369):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1, 0x8, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000b40)=r1, 0x4)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002040)={0x6, 0x3, &(0x7f0000002100)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000002140)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002180)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000002200)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

11.529871104s ago: executing program 4 (id=372):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6bcd41fd8"}}, 0x48}}, 0x410)
sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x3, 0x212, 0xffffffff, {0x77359400}, {}, {}, 0x1, @can={{0x3, 0x1, 0x1}, 0x3, 0x0, 0x0, 0x0, "cd9aa05aa67029c9"}}, 0x48}, 0x1, 0x0, 0x0, 0x400c0}, 0x4001)

11.331484353s ago: executing program 4 (id=374):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000000440)='./file0\x00', 0x4000, &(0x7f0000000480)={[{@force}, {}, {@nobarrier}, {@nls={'nls', 0x3d, 'cp855'}}]}, 0x2, 0x5fd, &(0x7f00000004c0)="$eJzs3c1vHGcdB/DvbPwSB5G6bdIWBMJKDqBGJF5vm/qAREAI+VChSlwqoR6sZJNY2biVvUVuhZDD65X/oEXIOXPigDhEgjN/ApY49IDE3begmZ21N7Hrl8bxrunnIz37PDPPzDPP8/PMszuzsjbAl9bCuxl/lCILV95eK5c3N1qdzY3W/X45yWSSRjLWy1IsJ8V4ciO9lK+VK+vmis87znufvDX/WfPhg97SWJ2q7Rv77Xc463XKTJIzdX5c7d08oL2fHdDY5EC5DNjlfuBg2B7vsn6U3Z/xugVGQdF739xlOjmX5Gz/fayeHRon27vjd6RZDgAAAE6pF7aylbWcH3Y/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DSpf/+/qFOjX55J0f/9/4l6XeryqfZo2B0AAAAAAAAAgGPwra1sZS3n+8uPi+o7/0vVwoXq9Sv5MKtpZyVXs5bFdNPNSppJpgcamlhb7HZXmofYc27PPedOZrwAAAAAAAAA8H/qV1nY+f4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABGQZGc6WVVutAvT6cxluRskolyu/Xkb/3yafZo2B0AAACAE/DCVraylvP95cdFdc//SnXffzYfZjndLKWbTtq5VT0L6N31NzY3Wp3Njdb9Mu1u9wf/PVI3qhbTe/aw95Fnqy0uVvV/mkgW8uP8NFcyk3eykqX8PIvppp2Z/KgqLabIdP30Yrrfz737e+OJpXcO6utrVU+mcjtLVd+u5mbeTye30qjGUG2z/xEflNEpvl87ZIxu1Xk5oj/U+clb32PddBWR8e2IzNaxL6Px4v6ROOJ58vSRmmlsP4O68Bxifq7Oy1j/bmgx38vTkZgbOPte2T8SyaV/f/MvdzvL9+7eXr0yOkP6gp6ORGsgEq9+qSIxUUejN4v2Z8vSwbPlpWrf81nKT/J+bqWdNzOfNzOXN/JGZjOf6wNxvXjwtXYnyVGutcvfqQtTSX5f56OhjOuLA3EdnOmmq7rBNTtReun4Z6Sxr9eF8hi/rvPR8HQkmgOReHn/SPzxcfm62lm+t3J38YNDHu/bdV5etr8dqbm5PF9e2u7Rk2dHWfdy+YfcVdes6i5s1zV21V3811fruoOu1In6M9zuluaqulf3rGtVda8N1O31KQeAkXfu9XMTU/+Z+ufUp1O/mbo79fbZH07OT35jIuP/GPvrmT83Hja+V7yeT/PLnft/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgi1v96ON7i51Oe0VB4dQWxuqzeVT6M9qFMloHbzzkiQl47q51739wbfWjj7+7dH/xTvtOe7nVal6fm78+P3f92u2lTnu29zrsbgLPwc6b/rB7AgAAAAAAAAAAABzWSfzLwbDHCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJxuC+9m/FGKNGevzpbLmxutTpn65Z0tx5I0khS/SIq/JzfSS5keaK74vOO898lb8581Hz7YaWusv31jv/0mDzWK9TplJsmZOn8GT7R385nbK7ZHWAbscj9wMGz/CwAA//8BTQrw")
mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./proc\x00', 0x1a8)
mount(0x0, &(0x7f0000000b00)='./proc\x00', &(0x7f0000000b40)='proc\x00', 0x0, 0x0)

10.970775762s ago: executing program 4 (id=378):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000c80)=0x100000001, 0x4)
bind$inet(r0, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000d00)={0x2, 0x4e21, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000dc0)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)

10.431379309s ago: executing program 4 (id=383):
r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0})
io_uring_register$IORING_REGISTER_ZCRX_IFQ(r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x1000}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1)
syz_ublk_add_dev(r1, 0x0, r0, 0x0, &(0x7f0000000240)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0)
io_uring_register$IORING_REGISTER_ZCRX_CTRL(r1, 0x24, &(0x7f0000000180)={0x0, 0x3, '\x00', @zc_export={r1}}, 0x0)

9.911415795s ago: executing program 32 (id=383):
r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0})
io_uring_register$IORING_REGISTER_ZCRX_IFQ(r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x1000}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1)
syz_ublk_add_dev(r1, 0x0, r0, 0x0, &(0x7f0000000240)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0)
io_uring_register$IORING_REGISTER_ZCRX_CTRL(r1, 0x24, &(0x7f0000000180)={0x0, 0x3, '\x00', @zc_export={r1}}, 0x0)

8.292329451s ago: executing program 2 (id=395):
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket(0x2d, 0x2, 0x0)
setsockopt(r0, 0x11d, 0x1, &(0x7f0000000140)="01000000", 0x4)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0)
sendto(r0, 0x0, 0x42, 0x40040, &(0x7f0000000200)=@generic={0x2d, "00000000000000001f00010000000600"}, 0x80)

6.061629582s ago: executing program 2 (id=405):
pipe2(&(0x7f0000003340)={<r0=>0xffffffffffffffff}, 0x4000)
fstat(r0, &(0x7f0000003380)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setresuid(r1, r1, r1)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}, 0xd0})

5.698221412s ago: executing program 2 (id=408):
syz_mount_image$xfs(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)={[{@largeio}, {@prjquota}]}, 0x1, 0xb8e1, &(0x7f0000000980)="$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")
chdir(&(0x7f000000c280)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f000000c3c0)='./file0\x00', 0x101201, 0x20)
fallocate(r0, 0x0, 0xa00, 0x1000005)
fallocate(r0, 0x10, 0x5, 0x1000005)

4.757360725s ago: executing program 0 (id=416):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0xa4, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf4240}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0xa4}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)=@gettclass={0x24, 0x28, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xffff, 0xffff}}}, 0x24}}, 0x0)

4.28578735s ago: executing program 0 (id=419):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)="db", 0x1}], 0x1}, 0x41)
recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10001)
sendmsg$inet(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="04", 0x1}], 0x1}, 0x40000c1)
recvmsg$unix(r0, &(0x7f0000002080)={0x0, 0x0, 0x0}, 0x61)

4.078277371s ago: executing program 0 (id=420):
r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020)
mount(&(0x7f0000000300), &(0x7f0000000100)='.\x00', &(0x7f0000000080)='tmpfs\x00', 0x20849b, 0x0)
pread64(r0, &(0x7f0000002240)=""/237, 0xfdef, 0x4eb)

3.877612827s ago: executing program 0 (id=421):
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r0 = gettid()
tkill(r0, 0x15)
tkill(r0, 0x5)
rt_sigprocmask(0x2, &(0x7f0000000240)={[0x7]}, 0x0, 0x8)

3.605287992s ago: executing program 0 (id=423):
r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
unshare(0x22020600)
pselect6(0x40, &(0x7f0000000480)={0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x800, 0x8f9f, 0xfffffffffffffffc}, 0x0, &(0x7f00000004c0)={0x1f, 0x8003, 0x381, 0x0, 0x200, 0x9e25, 0x2, 0x6}, &(0x7f0000000500)={0x0, 0x3938700}, 0x0)

3.219672028s ago: executing program 1 (id=426):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x161)
mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x1000000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000380)='100', 0x3)
unshare(0x4a000200)

2.501678766s ago: executing program 1 (id=427):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@noblock_validity}]}, 0xff, 0x451, &(0x7f0000000280)="$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")
syz_open_procfs(0xffffffffffffffff, &(0x7f0000001700)='ns\x00')
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001740)='ns/user\x00')
open_by_handle_at(r1, &(0x7f0000001780)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r0], 0x101c40)

2.366665655s ago: executing program 2 (id=429):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond0\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)

1.685866028s ago: executing program 0 (id=430):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a40)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)={0x24, r1, 0x5, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)={0x5c, r1, 0x5, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2d, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @val={0x5, 0x3, {0x5, 0x55, 0x8}}, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008054}, 0x0)

1.674167461s ago: executing program 1 (id=431):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7, "d9298498abdba7feffffffa34c226af5160e961711a03760760beeab91e8ff00550cfb38474b63a70e3bd43a847a1597c8ef03da5be4220000003aa900", 0x23}, 0x60)
listen(r0, 0x0)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x10000000})

1.120934383s ago: executing program 3 (id=432):
r0 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0xffff], [0x0, 0xffff], 0x0, 0x2, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x578}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)
r1 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c)
writev(r1, &(0x7f00000028c0)=[{&(0x7f00000005c0)="06c3", 0x2}, {&(0x7f0000000880)="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", 0x615}, {&(0x7f0000000500)="4c7911315ed07e13be5391e38b57247dcbfa424aaec74724dd2da16f11eb214569c4c1781fd0c9bfbe5491e5675fadc4e6292bd9235dceba13", 0x39}], 0x3)

1.108737355s ago: executing program 2 (id=433):
syz_mount_image$nilfs2(&(0x7f0000000380), &(0x7f0000000a40)='./file0\x00', 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB='\x00'], 0xf, 0xa02, &(0x7f0000001ec0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x0)
open(&(0x7f000000e700)='./file1\x00', 0x145142, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug\x00', 0xaf)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000600)={{&(0x7f0000000280)=[{0x3, 0x0, 0x9, {0xfffffffffffffff7, 0x2}, 0x58, 0xffffffffffffc}], 0x1, 0x40, 0xd, 0xde}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff7}, {0x0, 0x0, 0x8, 0x4, 0x3}, {0x0, 0x0, 0x28, 0x9, 0xffffffffffffff2d}, {&(0x7f00000003c0)=[0x9], 0x1, 0x8, 0x98f, 0x8}})

1.101940668s ago: executing program 1 (id=434):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0xd)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000340)='0', 0xfffffd2c)

982.68126ms ago: executing program 3 (id=435):
mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000005c0)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/kernel/reboot/hw_protection\x00', 0x2, 0x0)
setresuid(0x0, 0xee00, 0x0)
write(r0, &(0x7f0000000680)='r', 0x1)

902.336685ms ago: executing program 3 (id=436):
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x80000000, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6)
r0 = creat(&(0x7f00000196c0)='./bus\x00', 0xd4)
io_setup(0x5, &(0x7f0000019700)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000019740)=[&(0x7f0000019780)={0x0, 0x0, 0x0, 0x2, 0x0, r0, 0x0}, &(0x7f00000197c0)={0x0, 0x0, 0x8, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}])

642.851671ms ago: executing program 3 (id=437):
syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3989e9ef", @ANYRES16=0x0, @ANYBLOB="6ba425bd7000fbdbdf250100000008001900ac1414aa06001a004e23000008001900e000000108001800ac1414bb060003000700000006001d"], 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000000800000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000224400001400030076657468305f766972975f776966690008"], 0x3c}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0)

434.765519ms ago: executing program 1 (id=438):
mkdir(&(0x7f0000000280)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/devices/virtual/cpuid/cpu0/uevent\x00', 0x1, 0x0)
write(r0, &(0x7f0000000400)='add', 0x3)
ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0)

271.831998ms ago: executing program 3 (id=439):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
r1 = syz_io_uring_setup(0xf08, &(0x7f0000000040)={0x0, 0xfffffffe, 0x800, 0x3, 0x800000c3}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}})
io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000240), 0x4)

49.99765ms ago: executing program 1 (id=440):
setns(0xc9, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
epoll_create1(0x80000)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000180)={'security\x00', 0x0, [0x40, 0x3a8, 0x1, 0x6, 0x6e8]}, &(0x7f0000000340)=0x54)

48.365385ms ago: executing program 3 (id=441):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000740)=ANY=[@ANYBLOB="ffffffffffff0200000000024305000f32000000000102000000000202000000000200ff001401010010"], 0x0)

0s ago: executing program 2 (id=442):
r0 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x112)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='clear_refs\x00')
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
writev(r1, &(0x7f0000000240)=[{&(0x7f0000000280)='4', 0x1}], 0x1)
getdents(r0, &(0x7f0000000380)=""/184, 0xb8)

kernel console output (not intermixed with test programs):

fff9c
[   93.161104][ T5921] RBP: 00007fce95037b70 R08: 0000000000000000 R09: 0000000000000000
[   93.161117][ T5921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   93.161129][ T5921] R13: 00007fce95226038 R14: 00007fce95225fa0 R15: 00007ffeb5e8db18
[   93.161160][ T5921]  </TASK>
[   93.453207][ T5929] ip_tables: iptables: counters copy to user failed while replacing table
[   93.533502][   T33] audit: type=1800 audit(1793830390.820:2): pid=5884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.21" name="file1" dev="loop4" ino=9378 res=0 errno=-22
[   93.866326][ T5855] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   94.001358][ T5944] jffs2: notice: (5944) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   94.016340][ T5855] usb 3-1: Using ep0 maxpacket: 16
[   94.020834][ T5855] usb 3-1: New USB device found: idVendor=04d8, idProduct=00dd, bcdDevice=0.00
[   94.037118][ T5855] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   94.037150][ T5855] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0
[   94.037170][ T5855] usb 3-1: config 0 interface 0 has no altsetting 0
[   94.037202][ T5855] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.095572][ T5855] usb 3-1: config 0 descriptor??
[   94.627054][ T5855] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0
[   94.627113][ T5855] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0
[   94.627138][ T5855] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0
[   94.627161][ T5855] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0
[   94.627186][ T5855] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0
[   94.633030][ T5855] mcp2221 0003:04D8:00DD.0001: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0
[   94.866369][ T5855] usb 3-1: USB disconnect, device number 2
[   95.057394][ T5955] loop1: detected capacity change from 0 to 1024
[   95.124188][ T5958] CIFS: Attempting to mount //127.0.0.1/share
[   95.139513][ T5950] loop0: detected capacity change from 0 to 32768
[   95.254558][   T33] audit: type=1800 audit(1793830392.540:3): pid=5950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.40" name="file1" dev="loop0" ino=4 res=0 errno=-22
[   95.331002][  T142] read_mapping_page failed!
[   95.331169][  T142] ERROR: (device loop0): txCommit: 
[   95.331169][  T142] 
[   95.338446][  T142] ERROR: (device loop0): remounting filesystem as read-only
[   95.338732][  T142] jfs_write_inode: jfs_commit_inode failed!
[   95.409286][ T5964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.44'.
[   95.435152][ T5964] netlink: 24 bytes leftover after parsing attributes in process `syz.3.44'.
[   95.435451][ T5964] Zero length message leads to an empty skb
[   95.562684][ T5968] FAULT_INJECTION: forcing a failure.
[   95.562684][ T5968] name failslab, interval 1, probability 0, space 0, times 0
[   95.562715][ T5968] CPU: 1 UID: 0 PID: 5968 Comm: syz.2.46 Not tainted syzkaller #0 PREEMPT(full) 
[   95.562738][ T5968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[   95.562750][ T5968] Call Trace:
[   95.562758][ T5968]  <TASK>
[   95.562767][ T5968]  dump_stack_lvl+0xe8/0x150
[   95.562808][ T5968]  should_fail_ex+0x3eb/0x540
[   95.562841][ T5968]  ? __alloc_empty_sheaf+0x28/0x40
[   95.562866][ T5968]  should_failslab+0xa8/0x100
[   95.562886][ T5968]  ? __alloc_empty_sheaf+0x28/0x40
[   95.562908][ T5968]  __kmalloc_flags_noprof+0x123/0x790
[   95.562938][ T5968]  ? __alloc_empty_sheaf+0x28/0x40
[   95.562968][ T5968]  __alloc_empty_sheaf+0x28/0x40
[   95.562993][ T5968]  __pcs_replace_empty_main+0x43b/0x6c0
[   95.563022][ T5968]  __kmalloc_noprof+0x476/0x710
[   95.563049][ T5968]  ? __kmalloc_noprof+0x1a6/0x710
[   95.563071][ T5968]  ? __d_alloc+0xba/0x820
[   95.563095][ T5968]  ? __d_alloc+0xba/0x820
[   95.563128][ T5968]  __d_alloc+0xba/0x820
[   95.563159][ T5968]  d_alloc+0x4b/0x190
[   95.563183][ T5968]  ? lookup_one_qstr_excl+0xc4/0x360
[   95.563213][ T5968]  lookup_one_qstr_excl+0xd8/0x360
[   95.563246][ T5968]  filename_rmdir+0x1d7/0x500
[   95.563272][ T5968]  ? __pfx_filename_rmdir+0x10/0x10
[   95.563301][ T5968]  ? do_getname+0x151/0x250
[   95.563327][ T5968]  __se_sys_unlinkat+0x71/0x1a0
[   95.563352][ T5968]  do_syscall_64+0x16a/0x530
[   95.563373][ T5968]  ? trace_irq_disable+0x3b/0x140
[   95.563399][ T5968]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.563419][ T5968]  ? clear_bhb_loop+0x70/0xc0
[   95.563451][ T5968]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.563470][ T5968] RIP: 0033:0x00007eff2b59fb19
[   95.563491][ T5968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   95.563508][ T5968] RSP: 002b:00007eff2c50f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107
[   95.563533][ T5968] RAX: ffffffffffffffda RBX: 00007eff2b825fa0 RCX: 00007eff2b59fb19
[   95.563548][ T5968] RDX: 0000000000000200 RSI: 0000200000000900 RDI: ffffffffffffff9c
[   95.563560][ T5968] RBP: 00007eff2b637b70 R08: 0000000000000000 R09: 0000000000000000
[   95.563572][ T5968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   95.563584][ T5968] R13: 00007eff2b826038 R14: 00007eff2b825fa0 R15: 00007ffec98e5b88
[   95.563616][ T5968]  </TASK>
[   95.596897][  T142] read_mapping_page failed!
[   95.596916][  T142] ERROR: (device loop0): txCommit: 
[   95.596916][  T142] 
[   95.596956][  T142] ERROR: (device loop0): remounting filesystem as read-only
[   95.596969][  T142] jfs_write_inode: jfs_commit_inode failed!
[   95.916945][ T5958] CIFS: VFS: cifs_mount failed w/return code = -112
[   96.326568][ T5977] syz.0.48 uses obsolete (PF_INET,SOCK_PACKET)
[   96.405337][ T5966] loop3: detected capacity change from 0 to 32768
[   96.422377][ T5966] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.45 (5966)
[   96.505979][ T5973] loop2: detected capacity change from 0 to 32768
[   96.574484][ T5966] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   96.574547][ T5966] BTRFS info (device loop3): using crc32c checksum algorithm
[   96.664844][ T5973] ERROR: (device loop2): xtSearch: xt_getpage: xtree page corrupt
[   96.664844][ T5973] 
[   96.664888][ T5973] xtLookup: xtSearch returned -5
[   96.664899][ T5973] add_index: get/read_metapage failed!
[   96.664909][ T5973] ERROR: (device loop2): xtSearch: xt_getpage: xtree page corrupt
[   96.664909][ T5973] 
[   96.664933][ T5973] xtLookup: xtSearch returned -5
[   96.664941][ T5973] free_index: error reading directory table
[   96.664948][ T5973] ERROR: (device loop2): xtSearch: xt_getpage: xtree page corrupt
[   96.664948][ T5973] 
[   96.664971][ T5973] xtLookup: xtSearch returned -5
[   96.664978][ T5973] free_index: error reading directory table
[   96.664987][ T5973] ERROR: (device loop2): xtSearch: xt_getpage: xtree page corrupt
[   96.664987][ T5973] 
[   96.665022][ T5973] xtLookup: xtSearch returned -5
[   96.665031][ T5973] free_index: error reading directory table
[   96.665038][ T5973] ERROR: (device loop2): xtSearch: xt_getpage: xtree page corrupt
[   96.665038][ T5973] 
[   96.665062][ T5973] xtLookup: xtSearch returned -5
[   96.665070][ T5973] free_index: error reading directory table
[   96.665078][ T5973] ERROR: (device loop2): xtSearch: xt_getpage: xtree page corrupt
[   96.665078][ T5973] 
[   96.665101][ T5973] xtLookup: xtSearch returned -5
[   96.665109][ T5973] free_index: error reading directory table
[   96.763312][ T5966] BTRFS info (device loop3): enabling ssd optimizations
[   96.763339][ T5966] BTRFS info (device loop3): turning on async discard
[   96.763385][ T5966] BTRFS info (device loop3): enabling free space tree
[   97.131741][ T6008] Bluetooth: ISO socket layer initialized
[   97.277942][ T5645] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   97.974448][ T6027] warning: `syz.3.65' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   98.223186][ T6007] loop1: detected capacity change from 0 to 32768
[   98.238377][ T6007] BTRFS warning: v1 space cache is deprecated, falling back to no space cache
[   98.244306][ T6007] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.56 (6007)
[   98.363556][ T6007] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   98.363595][ T6007] BTRFS info (device loop1): using sha256 checksum algorithm
[   98.527222][ T6053] netlink: 116 bytes leftover after parsing attributes in process `syz.2.72'.
[   98.533399][ T6007] BTRFS info (device loop1): rebuilding free space tree
[   98.626939][ T6035] loop0: detected capacity change from 0 to 8192
[   98.686001][ T5636] Bluetooth: hci4: command tx timeout
[   98.700050][ T6035] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   98.811933][ T6007] BTRFS info (device loop1): disabling free space tree
[   98.812030][ T6007] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   98.812053][ T6007] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   98.909168][ T6007] BTRFS info (device loop1): turning off barriers
[   98.909200][ T6007] BTRFS info (device loop1): turning on sync discard
[   98.909216][ T6007] BTRFS info (device loop1): force clearing of disk cache
[   98.909231][ T6007] BTRFS info (device loop1): enabling auto defrag
[   99.237169][ T6057] loop2: detected capacity change from 0 to 32768
[   99.262291][ T6057] =======================================================
[   99.262291][ T6057] WARNING: The mand mount option has been deprecated and
[   99.262291][ T6057]          and is ignored by this kernel. Remove the mand
[   99.262291][ T6057]          option from the mount to silence this warning.
[   99.262291][ T6057] =======================================================
[   99.262411][ T6057] BTRFS warning: v1 space cache is deprecated, falling back to no space cache
[   99.270147][ T6057] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.73 (6057)
[   99.317362][ T6057] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[   99.317393][ T6057] BTRFS info (device loop2): using crc32c checksum algorithm
[   99.560332][ T6057] BTRFS info (device loop2): rebuilding free space tree
[   99.637350][ T5635] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   99.641928][ T6057] BTRFS info (device loop2): disabling free space tree
[   99.641998][ T6057] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   99.642020][ T6057] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   99.646320][ T6031] loop4: detected capacity change from 0 to 32768
[   99.691789][ T6057] BTRFS info (device loop2): enabling ssd optimizations
[   99.691818][ T6057] BTRFS info (device loop2): turning on async discard
[   99.691834][ T6057] BTRFS info (device loop2): force clearing of disk cache
[   99.691851][ T6057] BTRFS info (device loop2): use zstd compression, level 3
[   99.873095][ T6076] Illegal XDP return value 4294967277 on prog  (id 7) dev syz_tun, expect packet loss!
[   99.953357][ T6031] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  100.211334][ T5654] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  100.254904][ T6031] XFS (loop4): Ending clean mount
[  100.292338][ T6031] XFS (loop4): Quotacheck needed: Please wait.
[  100.354246][ T6091] loop3: detected capacity change from 0 to 512
[  100.649684][ T6031] XFS (loop4): Quotacheck: Done.
[  100.887380][ T6102] netlink: 'syz.2.81': attribute type 1 has an invalid length.
[  100.887439][ T6102] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  100.887450][ T6102] IPv6: NLM_F_CREATE should be set when creating new route
[  101.276331][ T6114] loop3: detected capacity change from 0 to 1024
[  101.284814][ T6114] EXT4-fs: Ignoring removed i_version option
[  101.284844][ T6114] EXT4-fs: Ignoring removed i_version option
[  101.309701][ T6116] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  101.324143][ T6114] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  101.354487][ T5644] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  101.424210][ T6114] EXT4-fs error (device loop3): ext4_map_blocks:867: inode #3: block 2: comm syz.3.87: lblock 2 mapped to illegal pblock 2 (length 1)
[  101.424343][ T6114] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  101.426016][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  101.426040][    C1] EXT4-fs (loop3): initial error at time 1793830398: ext4_map_blocks:867: inode 3: block 2
[  101.426079][    C1] EXT4-fs (loop3): last error at time 1793830398: ext4_map_blocks:867: inode 3: block 2
[  101.467575][ T6114] Quota error (device loop3): qtree_write_dquot: dquota write failed
[  101.467631][ T6114] EXT4-fs error (device loop3): ext4_map_blocks:867: inode #3: block 48: comm syz.3.87: lblock 0 mapped to illegal pblock 48 (length 1)
[  101.467664][ T6114] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  101.516048][ T6114] Quota error (device loop3): v2_write_file_info: Can't write info structure
[  101.516074][ T6114] EXT4-fs error (device loop3): ext4_acquire_dquot:7120: comm syz.3.87: Failed to acquire dquot type 0
[  101.516248][ T6114] loop3: lost filesystem error report for type 5 error -117
[  101.522545][ T6114] EXT4-fs error (device loop3) in ext4_reserve_inode_write:7459: Corrupt filesystem
[  101.522569][ T6114] loop3: lost filesystem error report for type 5 error -117
[  101.552955][ T6114] EXT4-fs error (device loop3): ext4_evict_inode:336: inode #11: comm syz.3.87: mark_inode_dirty error
[  101.552988][ T6114] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  101.567490][ T6114] EXT4-fs warning (device loop3): ext4_evict_inode:339: couldn't mark inode dirty (err -117)
[  101.567688][ T6114] EXT4-fs (loop3): 1 orphan inode deleted
[  101.579569][ T6114] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  101.586743][   T14] EXT4-fs error (device loop3): ext4_map_blocks:867: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1)
[  101.610392][   T14] Quota error (device loop3): remove_tree: Can't read quota data block 1
[  101.610456][   T14] EXT4-fs error (device loop3): ext4_release_dquot:7156: comm kworker/u8:1: Failed to release dquot type 0
[  101.735714][ T6099] loop1: detected capacity change from 0 to 32768
[  101.933067][ T6099] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  101.995312][ T6099] XFS (loop1): Ending clean mount
[  102.075025][   T33] audit: type=1800 audit(1793830399.360:4): pid=6099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.83" name="file1" dev="loop1" ino=4422 res=0 errno=-22
[  102.129919][ T6099] XFS (loop1): User initiated shutdown received.
[  102.130195][ T6099] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:468).  Shutting down filesystem.
[  102.130243][ T6099] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[  102.212288][ T6122] loop0: detected capacity change from 0 to 32768
[  102.237036][ T6122] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  102.237059][ T6122] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  102.321822][ T5635] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  102.359903][ T6122] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  102.363768][ T5855] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  102.363788][ T5855] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  102.501973][ T5645] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.595168][ T1017] EXT4-fs error (device loop3): ext4_map_blocks:867: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1)
[  102.595210][ T1017] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  102.595550][ T1017] Quota error (device loop3): remove_tree: Can't read quota data block 1
[  102.595588][ T1017] EXT4-fs error (device loop3): ext4_release_dquot:7156: comm kworker/u8:7: Failed to release dquot type 0
[  102.595607][ T1017] loop3: lost filesystem error report for type 5 error -117
[  102.603635][ T5645] EXT4-fs error (device loop3): __ext4_get_inode_loc:5733: comm syz-executor: Invalid inode table block 1 in block_group 0
[  102.603667][ T5645] loop3: lost filesystem error report for type 5 error -117
[  102.611035][ T5645] EXT4-fs error (device loop3) in ext4_reserve_inode_write:7459: Corrupt filesystem
[  102.611069][ T5645] loop3: lost filesystem error report for type 5 error -117
[  102.620732][ T5645] EXT4-fs error (device loop3): ext4_quota_off:7404: inode #3: comm syz-executor: mark_inode_dirty error
[  102.620759][ T5645] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  102.622596][ T5645] EXT4-fs error (device loop3): __ext4_get_inode_loc:5733: comm syz-executor: Invalid inode table block 1 in block_group 0
[  102.624790][ T5645] loop3: lost filesystem error report for type 5 error -117
[  102.819196][ T5855] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 455ms
[  102.832440][ T5855] gfs2: fsid=syz:syz.0: jid=0: Done
[  102.832493][ T6122] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  103.273960][ T6153] loop2: detected capacity change from 0 to 64
[  103.310209][ T5855] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  103.458751][ T5855] usb 5-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  103.460174][ T5855] usb 5-1: config 0 has an invalid interface number: 50 but max is 0
[  103.460201][ T5855] usb 5-1: config 0 has no interface number 0
[  103.460242][ T5855] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  103.462733][ T5855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.462758][ T5855] usb 5-1: Product: syz
[  103.462772][ T5855] usb 5-1: Manufacturer: syz
[  103.462786][ T5855] usb 5-1: SerialNumber: syz
[  103.519372][   T33] audit: type=1800 audit(1793830400.810:5): pid=6122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.90" name="file1" dev="loop0" ino=9378 res=0 errno=-22
[  103.525811][ T5855] usb 5-1: config 0 descriptor??
[  103.652923][ T5855] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0
[  103.984134][ T6163] vivid-001: disconnect
[  104.007483][ T6163] vivid-001: reconnect
[  104.372324][ T6180] loop2: detected capacity change from 0 to 256
[  104.380829][ T6180] exfat: Deprecated parameter 'namecase'
[  104.394452][    C0] usb 5-1: yurex_control_callback - control failed: -71
[  104.394940][ T5763] usb 5-1: USB disconnect, device number 2
[  104.439222][ T6180] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0x88f4ad1f, utbl_chksum : 0xe619d30d)
[  104.458485][ T6181] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  104.475392][ T5763] yurex 5-1:0.50: USB YUREX #0 now disconnected
[  104.525270][ T6184] loop1: detected capacity change from 0 to 512
[  104.539339][ T6184] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  104.640479][ T6184] EXT4-fs (loop1): 1 orphan inode deleted
[  104.655704][ T6184] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.657755][  T142] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  104.657860][  T142] EXT4-fs error (device loop1): ext4_release_dquot:7156: comm kworker/u8:5: Failed to release dquot type 1
[  104.657878][  T142] loop1: lost filesystem error report for type 5 error -117
[  104.693346][ T6184] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  104.739229][ T6184] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.111: deleted inode referenced: 16
[  104.835121][ T5635] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.898555][ T6193] FAULT_INJECTION: forcing a failure.
[  104.898555][ T6193] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  104.898591][ T6193] CPU: 0 UID: 0 PID: 6193 Comm: syz.2.114 Not tainted syzkaller #0 PREEMPT(full) 
[  104.898616][ T6193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  104.898628][ T6193] Call Trace:
[  104.898637][ T6193]  <TASK>
[  104.898646][ T6193]  dump_stack_lvl+0xe8/0x150
[  104.898687][ T6193]  should_fail_ex+0x3eb/0x540
[  104.898722][ T6193]  _copy_from_user+0x2d/0xb0
[  104.898754][ T6193]  __se_sys_splice+0x28d/0x490
[  104.898791][ T6193]  ? __pfx___se_sys_splice+0x10/0x10
[  104.898827][ T6193]  ? __x64_sys_splice+0x21/0xf0
[  104.898864][ T6193]  do_syscall_64+0x16a/0x530
[  104.898888][ T6193]  ? trace_irq_disable+0x3b/0x140
[  104.898916][ T6193]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.898937][ T6193]  ? clear_bhb_loop+0x70/0xc0
[  104.898962][ T6193]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.898982][ T6193] RIP: 0033:0x00007eff2b59fb19
[  104.899004][ T6193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  104.899021][ T6193] RSP: 002b:00007eff2c50f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113
[  104.899044][ T6193] RAX: ffffffffffffffda RBX: 00007eff2b825fa0 RCX: 00007eff2b59fb19
[  104.899059][ T6193] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000003
[  104.899071][ T6193] RBP: 00007eff2b637b70 R08: 0000000000008000 R09: 0000000000000004
[  104.899084][ T6193] R10: 000020000000ac80 R11: 0000000000000246 R12: 0000000000000000
[  104.899097][ T6193] R13: 00007eff2b826038 R14: 00007eff2b825fa0 R15: 00007ffec98e5b88
[  104.899131][ T6193]  </TASK>
[  105.203804][ T6201] loop4: detected capacity change from 0 to 256
[  105.330984][ T5763] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  105.333666][ T6205] netlink: 20 bytes leftover after parsing attributes in process `syz.2.121'.
[  105.345103][ T6201] support for the xor transformation has been removed.
[  105.453553][ T6207] loop3: detected capacity change from 0 to 2048
[  105.486141][ T5763] usb 2-1: Using ep0 maxpacket: 8
[  105.489458][ T5763] usb 2-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  105.492038][ T5763] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  105.492091][ T5763] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  105.492113][ T5763] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  105.492137][ T5763] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  105.492159][ T5763] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  105.492201][ T5763] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.600588][ T6211] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  105.645128][ T6189] loop0: detected capacity change from 0 to 32768
[  105.818296][ T5763] usb 2-1: usb_control_msg returned -32
[  105.818357][ T5763] usbtmc 2-1:16.0: can't read capabilities
[  105.920945][ T6211] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  105.920990][ T6211] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4)
[  105.941936][ T6211] Remounting filesystem read-only
[  105.958258][ T5645] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer
[  106.416652][ T5740] usb 2-1: USB disconnect, device number 2
[  106.636918][ T6223] loop0: detected capacity change from 0 to 32768
[  106.673101][ T6230] loop3: detected capacity change from 0 to 512
[  106.694570][ T6223] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  106.713329][ T6230] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[  106.718398][ T6230] EXT4-fs error (device loop3): ext4_iget_extra_inode:6027: inode #15: comm syz.3.130: corrupted in-inode xattr: e_value size too large
[  106.721053][ T6230] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  106.721982][ T6230] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.130: couldn't read orphan inode 15 (err -117)
[  106.722012][ T6230] loop3: lost filesystem error report for type 5 error -117
[  106.730154][ T6230] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  106.873919][ T6223] XFS (loop0): Ending clean mount
[  106.949675][ T5645] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.991704][ T6242] process 'syz.2.131' launched './file2' with NULL argv: empty string added
[  107.204094][ T5641] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  107.221558][ T6246] netlink: 56 bytes leftover after parsing attributes in process `syz.3.132'.
[  107.329624][ T6227] loop4: detected capacity change from 0 to 32768
[  107.405409][ T6227] ERROR: (device loop4): xtSearch: xt_getpage: xtree page corrupt
[  107.405409][ T6227] 
[  107.405453][ T6227] xtLookup: xtSearch returned -5
[  107.405462][ T6227] add_index: get/read_metapage failed!
[  107.405472][ T6227] ERROR: (device loop4): xtSearch: xt_getpage: xtree page corrupt
[  107.405472][ T6227] 
[  107.405498][ T6227] xtLookup: xtSearch returned -5
[  107.405506][ T6227] free_index: error reading directory table
[  107.405515][ T6227] ERROR: (device loop4): xtSearch: xt_getpage: xtree page corrupt
[  107.405515][ T6227] 
[  107.405534][ T6227] xtLookup: xtSearch returned -5
[  107.405575][ T6227] free_index: error reading directory table
[  107.405584][ T6227] ERROR: (device loop4): xtSearch: xt_getpage: xtree page corrupt
[  107.405584][ T6227] 
[  107.405608][ T6227] xtLookup: xtSearch returned -5
[  107.405617][ T6227] free_index: error reading directory table
[  107.405626][ T6227] ERROR: (device loop4): xtSearch: xt_getpage: xtree page corrupt
[  107.405626][ T6227] 
[  107.405650][ T6227] xtLookup: xtSearch returned -5
[  107.405659][ T6227] free_index: error reading directory table
[  107.405666][ T6227] ERROR: (device loop4): xtSearch: xt_getpage: xtree page corrupt
[  107.405666][ T6227] 
[  107.405691][ T6227] xtLookup: xtSearch returned -5
[  107.405699][ T6227] free_index: error reading directory table
[  107.915937][ T5740] kernel read not supported for file /swaps (pid: 5740 comm: kworker/1:4)
[  108.221335][ T6250] loop2: detected capacity change from 0 to 32768
[  108.264797][ T6250] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  108.351108][ T6250] XFS (loop2): Ending clean mount
[  108.384877][ T6250] XFS (loop2): Quotacheck needed: Please wait.
[  108.535381][ T6250] XFS (loop2): Quotacheck: Done.
[  108.690228][ T5654] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  108.757779][ T6286] loop1: detected capacity change from 0 to 256
[  109.090766][ T6291] FAULT_INJECTION: forcing a failure.
[  109.090766][ T6291] name failslab, interval 1, probability 0, space 0, times 0
[  109.090803][ T6291] CPU: 1 UID: 0 PID: 6291 Comm: syz.0.150 Not tainted syzkaller #0 PREEMPT(full) 
[  109.090826][ T6291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  109.090838][ T6291] Call Trace:
[  109.090847][ T6291]  <TASK>
[  109.090856][ T6291]  dump_stack_lvl+0xe8/0x150
[  109.090896][ T6291]  should_fail_ex+0x3eb/0x540
[  109.090930][ T6291]  should_failslab+0xa8/0x100
[  109.090954][ T6291]  __kmalloc_cache_noprof+0x9e/0x600
[  109.090982][ T6291]  ? ecryptfs_init_fs_context+0x53/0x1b0
[  109.091012][ T6291]  ? ecryptfs_init_fs_context+0x53/0x1b0
[  109.091050][ T6291]  ecryptfs_init_fs_context+0x53/0x1b0
[  109.091084][ T6291]  alloc_fs_context+0x99e/0xd00
[  109.091127][ T6291]  __se_sys_fsopen+0x118/0x370
[  109.091153][ T6291]  do_syscall_64+0x16a/0x530
[  109.091175][ T6291]  ? trace_irq_disable+0x3b/0x140
[  109.091202][ T6291]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.091223][ T6291]  ? clear_bhb_loop+0x70/0xc0
[  109.091249][ T6291]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.091270][ T6291] RIP: 0033:0x00007f071b59fb19
[  109.091292][ T6291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  109.091308][ T6291] RSP: 002b:00007f071c46f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae
[  109.091333][ T6291] RAX: ffffffffffffffda RBX: 00007f071b825fa0 RCX: 00007f071b59fb19
[  109.091348][ T6291] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00002000000002c0
[  109.091361][ T6291] RBP: 00007f071b637b70 R08: 0000000000000000 R09: 0000000000000000
[  109.091374][ T6291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  109.091386][ T6291] R13: 00007f071b826038 R14: 00007f071b825fa0 R15: 00007ffd3076e1c8
[  109.091429][ T6291]  </TASK>
[  109.181134][ T6293] loop2: detected capacity change from 0 to 256
[  109.238303][ T6293] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d)
[  109.307230][ T6293] exFAT-fs (loop2): start_clu is invalid cluster(0x0)
[  109.379236][ T6297] loop0: detected capacity change from 0 to 2048
[  109.438374][ T6279] loop4: detected capacity change from 0 to 32768
[  109.441584][ T6279] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.138 (6279)
[  109.472307][ T6279] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  109.472341][ T6279] BTRFS info (device loop4): using sha256 checksum algorithm
[  109.528756][ T6297] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  109.536048][ T5740] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  109.625837][ T6279] BTRFS info (device loop4): enabling ssd optimizations
[  109.627586][ T6279] BTRFS info (device loop4): turning on async discard
[  109.627609][ T6279] BTRFS info (device loop4): enabling free space tree
[  109.692325][ T5740] usb 2-1: New USB device found: idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  109.695601][ T5740] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.723621][ T5641] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.750665][ T5740] usb 2-1: config 0 descriptor??
[  109.792309][ T5740] cp210x 2-1:0.0: cp210x converter detected
[  109.821449][ T6279] BTRFS info (device loop4): setting incompat feature flag for SIMPLE_QUOTA (0x10000)
[  109.834500][ T6315] hfsplus: failed to load extents file
[  110.110152][ T6322] netlink: 40 bytes leftover after parsing attributes in process `syz.0.155'.
[  110.238506][ T5740] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32
[  110.271565][ T5644] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  110.289936][ T6329] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  110.457449][ T5740] usb 2-1: cp210x converter now attached to ttyUSB0
[  110.675994][  T945] usb 2-1: USB disconnect, device number 3
[  110.765447][  T945] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  110.792312][ T6340] FAULT_INJECTION: forcing a failure.
[  110.792312][ T6340] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  110.792349][ T6340] CPU: 0 UID: 0 PID: 6340 Comm: syz.3.163 Not tainted syzkaller #0 PREEMPT(full) 
[  110.792371][ T6340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  110.792383][ T6340] Call Trace:
[  110.792390][ T6340]  <TASK>
[  110.792399][ T6340]  dump_stack_lvl+0xe8/0x150
[  110.792436][ T6340]  should_fail_ex+0x3eb/0x540
[  110.792470][ T6340]  prepare_alloc_pages+0x21e/0x5f0
[  110.792503][ T6340]  __alloc_frozen_pages_noprof+0x189/0x450
[  110.792535][ T6340]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  110.792571][ T6340]  ? policy_nodemask+0x31b/0x980
[  110.792597][ T6340]  alloc_pages_mpol+0x21e/0x390
[  110.792623][ T6340]  alloc_pages_noprof+0xb1/0x2b0
[  110.792646][ T6340]  get_free_pages_noprof+0xf/0x80
[  110.792674][ T6340]  __kasan_populate_vmalloc+0x38/0x1c0
[  110.792701][ T6340]  ? do_raw_spin_unlock+0xf5/0x200
[  110.792725][ T6340]  alloc_vmap_area+0xd10/0x1410
[  110.792763][ T6340]  ? __pfx_alloc_vmap_area+0x10/0x10
[  110.792782][ T6340]  ? __kmalloc_cache_node_noprof+0x3cc/0x620
[  110.792809][ T6340]  ? __kmalloc_cache_node_noprof+0x1f2/0x620
[  110.792834][ T6340]  ? __get_vm_area_node+0x155/0x2f0
[  110.792862][ T6340]  __get_vm_area_node+0x200/0x2f0
[  110.792903][ T6340]  __vmalloc_node_range_noprof+0x36e/0x16f0
[  110.792928][ T6340]  ? write_ldt+0x4f7/0x930
[  110.792993][ T6340]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  110.793018][ T6340]  ? __kasan_kmalloc+0x93/0xb0
[  110.793044][ T6340]  ? __kmalloc_cache_noprof+0x31c/0x600
[  110.793071][ T6340]  ? write_ldt+0x4f7/0x930
[  110.793095][ T6340]  __vmalloc_noprof+0xd2/0x120
[  110.793122][ T6340]  ? write_ldt+0x4f7/0x930
[  110.793144][  T945] cp210x 2-1:0.0: device disconnected
[  110.793151][ T6340]  write_ldt+0x4f7/0x930
[  110.793177][ T6340]  ? __se_sys_futex+0x3a8/0x450
[  110.793201][ T6340]  ? __pfx_write_ldt+0x10/0x10
[  110.793232][ T6340]  ? rcu_is_watching+0x16/0xb0
[  110.793270][ T6340]  __se_sys_modify_ldt+0x6c/0x310
[  110.793302][ T6340]  do_syscall_64+0x16a/0x530
[  110.793325][ T6340]  ? trace_irq_disable+0x3b/0x140
[  110.793352][ T6340]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.793373][ T6340]  ? clear_bhb_loop+0x70/0xc0
[  110.793397][ T6340]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.793416][ T6340] RIP: 0033:0x00007fce94f9fb19
[  110.793438][ T6340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  110.793455][ T6340] RSP: 002b:00007fce95dd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a
[  110.793478][ T6340] RAX: ffffffffffffffda RBX: 00007fce95225fa0 RCX: 00007fce94f9fb19
[  110.793492][ T6340] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000001
[  110.793504][ T6340] RBP: 00007fce95037b70 R08: 0000000000000000 R09: 0000000000000000
[  110.793517][ T6340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  110.793528][ T6340] R13: 00007fce95226038 R14: 00007fce95225fa0 R15: 00007ffeb5e8db18
[  110.793564][ T6340]  </TASK>
[  110.814958][ T6340] syz.3.163: vmalloc error: size 65536, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  110.815106][ T6340] CPU: 0 UID: 0 PID: 6340 Comm: syz.3.163 Not tainted syzkaller #0 PREEMPT(full) 
[  110.815126][ T6340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  110.815136][ T6340] Call Trace:
[  110.815144][ T6340]  <TASK>
[  110.815152][ T6340]  dump_stack_lvl+0xe8/0x150
[  110.815186][ T6340]  warn_alloc+0x24d/0x270
[  110.815210][ T6340]  ? lockdep_hardirqs_on+0x7b/0x110
[  110.815234][ T6340]  ? __pfx_warn_alloc+0x10/0x10
[  110.815254][ T6340]  ? kfree+0x1c7/0x650
[  110.815281][ T6340]  ? __get_vm_area_node+0x219/0x2f0
[  110.815309][ T6340]  __vmalloc_node_range_noprof+0x396/0x16f0
[  110.815367][ T6340]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  110.815391][ T6340]  ? __kasan_kmalloc+0x93/0xb0
[  110.815418][ T6340]  ? __kmalloc_cache_noprof+0x31c/0x600
[  110.815443][ T6340]  ? write_ldt+0x4f7/0x930
[  110.815465][ T6340]  __vmalloc_noprof+0xd2/0x120
[  110.815485][ T6340]  ? write_ldt+0x4f7/0x930
[  110.815511][ T6340]  write_ldt+0x4f7/0x930
[  110.815534][ T6340]  ? __se_sys_futex+0x3a8/0x450
[  110.815557][ T6340]  ? __pfx_write_ldt+0x10/0x10
[  110.815584][ T6340]  ? rcu_is_watching+0x16/0xb0
[  110.815617][ T6340]  __se_sys_modify_ldt+0x6c/0x310
[  110.815645][ T6340]  do_syscall_64+0x16a/0x530
[  110.815664][ T6340]  ? trace_irq_disable+0x3b/0x140
[  110.815686][ T6340]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.815704][ T6340]  ? clear_bhb_loop+0x70/0xc0
[  110.815727][ T6340]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.815744][ T6340] RIP: 0033:0x00007fce94f9fb19
[  110.815763][ T6340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  110.815777][ T6340] RSP: 002b:00007fce95dd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a
[  110.815795][ T6340] RAX: ffffffffffffffda RBX: 00007fce95225fa0 RCX: 00007fce94f9fb19
[  110.815808][ T6340] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000001
[  110.815819][ T6340] RBP: 00007fce95037b70 R08: 0000000000000000 R09: 0000000000000000
[  110.815830][ T6340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  110.815840][ T6340] R13: 00007fce95226038 R14: 00007fce95225fa0 R15: 00007ffeb5e8db18
[  110.815875][ T6340]  </TASK>
[  110.815954][ T6340] Mem-Info:
[  110.815963][ T6340] active_anon:10065 inactive_anon:12 isolated_anon:0
[  110.815963][ T6340]  active_file:6 inactive_file:43485 isolated_file:0
[  110.815963][ T6340]  unevictable:0 dirty:382 writeback:0
[  110.815963][ T6340]  slab_reclaimable:10958 slab_unreclaimable:96223
[  110.815963][ T6340]  mapped:29870 shmem:4620 pagetables:1233
[  110.815963][ T6340]  sec_pagetables:0 bounce:0
[  110.815963][ T6340]  kernel_misc_reclaimable:0
[  110.815963][ T6340]  free:1322011 free_pcp:11856 free_cma:0
[  110.816008][ T6340] Node 0 active_anon:40260kB inactive_anon:48kB active_file:24kB inactive_file:173740kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119480kB dirty:1524kB writeback:0kB shmem:18480kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11860kB pagetables:4760kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  110.816056][ T6340] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  110.816101][ T6340] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  110.816151][ T6340] lowmem_reserve[]: 0 2463 2464 2464 2464
[  110.816185][ T6340] Node 0 DMA32 free:1333172kB boost:0kB min:33920kB low:42400kB high:50880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:40208kB inactive_anon:48kB active_file:24kB inactive_file:173668kB unevictable:0kB writepending:1524kB zspages:0kB present:3129332kB managed:2522500kB mlocked:0kB bounce:0kB free_pcp:47420kB local_pcp:21436kB free_cma:0kB
[  110.816238][ T6340] lowmem_reserve[]: 0 0 1 1 1
[  110.816269][ T6340] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB
[  110.824205][ T6340] lowmem_reserve[]: 0 0 0 0 0
[  110.824247][ T6340] Node 1 Normal free:3939512kB boost:0kB min:55960kB low:69948kB high:83936kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  110.824298][ T6340] lowmem_reserve[]: 0 0 0 0 0
[  110.824330][ T6340] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  110.824488][ T6340] Node 0 DMA32: 1856*4kB (UME) 677*8kB (UM) 141*16kB (UM) 58*32kB (UME) 13*64kB (UM) 33*128kB (UME) 26*256kB (UM) 14*512kB (UME) 9*1024kB (ME) 3*2048kB (UME) 313*4096kB (UM) = 1333240kB
[  110.824634][ T6340] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  110.824724][ T6340] Node 1 Normal: 6*4kB (UM) 2*8kB (UM) 11*16kB (UM) 13*32kB (UM) 3*64kB (UM) 5*128kB (UM) 3*256kB (M) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3939512kB
[  110.824870][ T6340] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  110.824884][ T6340] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  110.824906][ T6340] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  110.824919][ T6340] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  110.824932][ T6340] 48006 total pagecache pages
[  110.824940][ T6340] 0 pages in swap cache
[  110.824946][ T6340] Free swap  = 124996kB
[  110.824953][ T6340] Total swap = 124996kB
[  110.824960][ T6340] 2097051 pages RAM
[  110.824967][ T6340] 0 pages HighMem/MovableOnly
[  110.824973][ T6340] 434464 pages reserved
[  110.824979][ T6340] 0 pages cma reserved
[  110.952792][ T6346] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only
[  110.953685][ T6346] overlayfs: NFS export requires an index dir, falling back to nfs_export=off.
[  111.015835][ T6350] FAULT_INJECTION: forcing a failure.
[  111.015835][ T6350] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  111.015869][ T6350] CPU: 0 UID: 0 PID: 6350 Comm: syz.2.168 Not tainted syzkaller #0 PREEMPT(full) 
[  111.015896][ T6350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  111.015907][ T6350] Call Trace:
[  111.015914][ T6350]  <TASK>
[  111.015922][ T6350]  dump_stack_lvl+0xe8/0x150
[  111.015956][ T6350]  should_fail_ex+0x3eb/0x540
[  111.015986][ T6350]  strncpy_from_user+0x36/0x2c0
[  111.016015][ T6350]  path_removexattrat+0x130/0x760
[  111.016038][ T6350]  ? __pfx_path_removexattrat+0x10/0x10
[  111.016055][ T6350]  ? do_futex+0x3e7/0x4e0
[  111.016103][ T6350]  ? rcu_is_watching+0x16/0xb0
[  111.016138][ T6350]  __x64_sys_lremovexattr+0x65/0x80
[  111.016165][ T6350]  do_syscall_64+0x16a/0x530
[  111.016184][ T6350]  ? trace_irq_disable+0x3b/0x140
[  111.016207][ T6350]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.016225][ T6350]  ? clear_bhb_loop+0x70/0xc0
[  111.016247][ T6350]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.016264][ T6350] RIP: 0033:0x00007eff2b59fb19
[  111.016283][ T6350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  111.016298][ T6350] RSP: 002b:00007eff2c50f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c6
[  111.016318][ T6350] RAX: ffffffffffffffda RBX: 00007eff2b825fa0 RCX: 00007eff2b59fb19
[  111.016332][ T6350] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  111.016343][ T6350] RBP: 00007eff2b637b70 R08: 0000000000000000 R09: 0000000000000000
[  111.016354][ T6350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  111.016365][ T6350] R13: 00007eff2b826038 R14: 00007eff2b825fa0 R15: 00007ffec98e5b88
[  111.016395][ T6350]  </TASK>
[  111.259605][ T6345] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  112.059927][ T6363] set_capacity_and_notify: 1 callbacks suppressed
[  112.059949][ T6363] loop3: detected capacity change from 0 to 512
[  112.104103][ T6363] EXT4-fs error (device loop3): ext4_xattr_inode_iget:473: comm syz.3.173: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840
[  112.104142][ T6363] loop3: lost filesystem error report for type 5 error -117
[  112.105937][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  112.105961][    C1] EXT4-fs (loop3): initial error at time 1793830409: ext4_xattr_inode_iget:473
[  112.105985][    C1] EXT4-fs (loop3): last error at time 1793830409: ext4_xattr_inode_iget:473
[  112.117968][ T6363] EXT4-fs (loop3): 1 orphan inode deleted
[  112.148059][ T6363] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  112.338024][ T5645] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.554325][ T6380] loop3: detected capacity change from 0 to 64
[  112.642023][ T6382] loop2: detected capacity change from 0 to 256
[  112.653609][ T6382] exfat: Deprecated parameter 'utf8'
[  112.653725][ T6382] exfat: Deprecated parameter 'utf8'
[  112.725981][ T6382] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  112.796524][ T6388] loop1: detected capacity change from 0 to 2048
[  113.049182][ T6393] macvlan2: entered promiscuous mode
[  113.199345][ T6397] macvlan2: entered promiscuous mode
[  113.408648][ T6403] sctp: [Deprecated]: syz.3.190 (pid 6403) Use of int in maxseg socket option.
[  113.408648][ T6403] Use struct sctp_assoc_value instead
[  113.550448][ T6391] loop4: detected capacity change from 0 to 32768
[  113.632302][ T6407] netlink: 16 bytes leftover after parsing attributes in process `syz.0.191'.
[  113.671999][ T6391] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  113.690585][ T6391] JBD2: Ignoring recovery information on journal
[  113.880763][ T6391] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  113.888009][ T6419] loop0: detected capacity change from 0 to 1024
[  113.911182][ T6419] EXT4-fs: Ignoring removed oldalloc option
[  113.911232][ T6419] EXT4-fs: Ignoring removed orlov option
[  113.986798][ T6419] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  114.058192][ T6426] loop3: detected capacity change from 0 to 16
[  114.086903][ T6414] nvme nvme0: rdma connection establishment failed (-512)
[  114.114513][ T6426] erofs (device loop3): mounted with root inode @ nid 36.
[  114.155419][ T6427] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.196: unexpected EA_INODE flag
[  114.411737][ T6414] nvme nvme0: rdma connection establishment failed (-512)
[  114.522227][ T5644] ocfs2: Unmounting device (7,4) on (node local)
[  114.620431][ T6414] nvme nvme0: rdma connection establishment failed (-512)
[  114.636111][ T5740] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  114.662716][ T6425] loop2: detected capacity change from 0 to 32768
[  114.715403][ T6425] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  114.748270][ T5641] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.796755][ T5740] usb 4-1: Using ep0 maxpacket: 8
[  114.802348][ T5740] usb 4-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  114.803588][ T5740] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  114.803618][ T5740] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  114.803641][ T5740] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  114.803662][ T5740] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  114.803700][ T5740] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.862507][ T6443] loop1: detected capacity change from 0 to 256
[  114.910583][ T6425] XFS (loop2): Ending clean mount
[  115.037762][ T5654] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  115.083190][ T5740] usb 4-1: GET_CAPABILITIES returned 0
[  115.083245][ T5740] usbtmc 4-1:16.0: can't read capabilities
[  115.384828][    C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  115.384978][    C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  115.385071][    C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  115.392841][  T945] usb 4-1: USB disconnect, device number 2
[  115.900482][ T3321] kworker/u8:9: attempt to access beyond end of device
[  115.900482][ T3321] loop1: rw=1, sector=1832, nr_sectors = 32 limit=256
[  115.900695][ T3321] kworker/u8:9: attempt to access beyond end of device
[  115.900695][ T3321] loop1: rw=1, sector=1896, nr_sectors = 32 limit=256
[  115.900867][ T3321] kworker/u8:9: attempt to access beyond end of device
[  115.900867][ T3321] loop1: rw=1, sector=1960, nr_sectors = 32 limit=256
[  115.901033][ T3321] kworker/u8:9: attempt to access beyond end of device
[  115.901033][ T3321] loop1: rw=1, sector=2024, nr_sectors = 32 limit=256
[  115.901431][ T3321] kworker/u8:9: attempt to access beyond end of device
[  115.901431][ T3321] loop1: rw=1, sector=2088, nr_sectors = 32 limit=256
[  115.901623][ T3321] kworker/u8:9: attempt to access beyond end of device
[  115.901623][ T3321] loop1: rw=1, sector=2152, nr_sectors = 32 limit=256
[  115.901794][ T3321] kworker/u8:9: attempt to access beyond end of device
[  115.901794][ T3321] loop1: rw=1, sector=2216, nr_sectors = 32 limit=256
[  115.905178][ T3321] kworker/u8:9: attempt to access beyond end of device
[  115.905178][ T3321] loop1: rw=1, sector=2280, nr_sectors = 32 limit=256
[  115.905353][ T3321] kworker/u8:9: attempt to access beyond end of device
[  115.905353][ T3321] loop1: rw=1, sector=2344, nr_sectors = 32 limit=256
[  115.905518][ T3321] kworker/u8:9: attempt to access beyond end of device
[  115.905518][ T3321] loop1: rw=1, sector=2408, nr_sectors = 32 limit=256
[  116.637827][ T6467] loop2: detected capacity change from 0 to 32768
[  116.730088][ T6479] EXT4-fs: Ignoring removed mblk_io_submit option
[  116.730390][ T6479] EXT4-fs: Ignoring removed orlov option
[  116.733598][ T6479] EXT4-fs (loop4): Test dummy encryption mode enabled
[  116.801367][ T6479] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.851206][ T6483] FAULT_INJECTION: forcing a failure.
[  116.851206][ T6483] name failslab, interval 1, probability 0, space 0, times 0
[  116.851239][ T6483] CPU: 1 UID: 0 PID: 6483 Comm: syz.0.216 Not tainted syzkaller #0 PREEMPT(full) 
[  116.851261][ T6483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  116.851272][ T6483] Call Trace:
[  116.851279][ T6483]  <TASK>
[  116.851287][ T6483]  dump_stack_lvl+0xe8/0x150
[  116.851324][ T6483]  should_fail_ex+0x3eb/0x540
[  116.851357][ T6483]  should_failslab+0xa8/0x100
[  116.851379][ T6483]  __kmalloc_cache_noprof+0x9e/0x600
[  116.851406][ T6483]  ? ext4_init_fs_context+0x4f/0xf0
[  116.851434][ T6483]  ? ext4_init_fs_context+0x4f/0xf0
[  116.851466][ T6483]  ext4_init_fs_context+0x4f/0xf0
[  116.851495][ T6483]  alloc_fs_context+0x99e/0xd00
[  116.851529][ T6483]  __se_sys_fsopen+0x118/0x370
[  116.851558][ T6483]  do_syscall_64+0x16a/0x530
[  116.851580][ T6483]  ? trace_irq_disable+0x3b/0x140
[  116.851605][ T6483]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.851624][ T6483]  ? clear_bhb_loop+0x70/0xc0
[  116.851643][ T6483]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.851662][ T6483] RIP: 0033:0x00007f071b59fb19
[  116.851682][ T6483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  116.851698][ T6483] RSP: 002b:00007f071c46f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae
[  116.851720][ T6483] RAX: ffffffffffffffda RBX: 00007f071b825fa0 RCX: 00007f071b59fb19
[  116.851734][ T6483] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000400
[  116.851747][ T6483] RBP: 00007f071b637b70 R08: 0000000000000000 R09: 0000000000000000
[  116.851759][ T6483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  116.851771][ T6483] R13: 00007f071b826038 R14: 00007f071b825fa0 R15: 00007ffd3076e1c8
[  116.851802][ T6483]  </TASK>
[  116.875956][ T5740] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  117.052481][ T5740] usb 2-1: New USB device found: idVendor=04e8, idProduct=6889, bcdDevice=1.00
[  117.076491][ T5740] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.076519][ T5740] usb 2-1: Product: syz
[  117.076533][ T5740] usb 2-1: Manufacturer: syz
[  117.076547][ T5740] usb 2-1: SerialNumber: syz
[  117.084392][ T6479] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-lib"
[  117.243131][ T6479] fscrypt: AES-256-XTS using blk-crypto-fallback
[  117.378581][ T5644] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.393922][ T6498] FAULT_INJECTION: forcing a failure.
[  117.393922][ T6498] name failslab, interval 1, probability 0, space 0, times 0
[  117.393956][ T6498] CPU: 1 UID: 0 PID: 6498 Comm: syz.2.221 Not tainted syzkaller #0 PREEMPT(full) 
[  117.393976][ T6498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  117.393987][ T6498] Call Trace:
[  117.393994][ T6498]  <TASK>
[  117.394002][ T6498]  dump_stack_lvl+0xe8/0x150
[  117.394041][ T6498]  should_fail_ex+0x3eb/0x540
[  117.394074][ T6498]  should_failslab+0xa8/0x100
[  117.394095][ T6498]  __kmalloc_cache_noprof+0x9e/0x600
[  117.394120][ T6498]  ? __kasan_kmalloc+0x93/0xb0
[  117.394147][ T6498]  ? __v4l2_subdev_state_alloc+0x5a/0x3d0
[  117.394169][ T6498]  ? __v4l2_subdev_state_alloc+0x5a/0x3d0
[  117.394201][ T6498]  __v4l2_subdev_state_alloc+0x5a/0x3d0
[  117.394228][ T6498]  subdev_open+0xad/0x430
[  117.394252][ T6498]  v4l2_open+0x1bc/0x3a0
[  117.394278][ T6498]  chrdev_open+0x4d9/0x600
[  117.394299][ T6498]  ? __pfx_chrdev_open+0x10/0x10
[  117.394318][ T6498]  ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[  117.394336][ T6498]  ? devcgroup_check_permission+0x31/0x8f0
[  117.394365][ T6498]  ? __pfx_chrdev_open+0x10/0x10
[  117.394383][ T6498]  do_dentry_open+0x80e/0x1360
[  117.394415][ T6498]  vfs_open_consume+0x4a/0x350
[  117.394436][ T6498]  ? path_openat+0x16e1/0x20f0
[  117.394467][ T6498]  path_openat+0x16fc/0x20f0
[  117.394513][ T6498]  do_file_open+0x23e/0x4a0
[  117.394547][ T6498]  ? __pfx_do_file_open+0x10/0x10
[  117.394604][ T6498]  ? _raw_spin_unlock+0x28/0x50
[  117.394625][ T6498]  ? alloc_fd+0x6af/0x760
[  117.394660][ T6498]  do_sys_openat2+0x115/0x200
[  117.394687][ T6498]  ? __pfx_do_sys_openat2+0x10/0x10
[  117.394717][ T6498]  ? do_user_addr_fault+0xd3f/0x1480
[  117.394748][ T6498]  __x64_sys_openat+0x138/0x170
[  117.394779][ T6498]  do_syscall_64+0x16a/0x530
[  117.394801][ T6498]  ? trace_irq_disable+0x3b/0x140
[  117.394829][ T6498]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.394849][ T6498]  ? clear_bhb_loop+0x70/0xc0
[  117.394874][ T6498]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.394893][ T6498] RIP: 0033:0x00007eff2b56034e
[  117.394915][ T6498] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  117.394931][ T6498] RSP: 002b:00007eff2c50eb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  117.394953][ T6498] RAX: ffffffffffffffda RBX: 00007eff2c50f6c0 RCX: 00007eff2b56034e
[  117.394967][ T6498] RDX: 0000000000000000 RSI: 00007eff2c50ec00 RDI: ffffffffffffff9c
[  117.394981][ T6498] RBP: 00007eff2c50ec00 R08: 0000000000000000 R09: 0000000000000000
[  117.394993][ T6498] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  117.395007][ T6498] R13: 00007eff2b826038 R14: 00007eff2b825fa0 R15: 00007ffec98e5b88
[  117.395041][ T6498]  </TASK>
[  117.546375][ T5763] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  117.556266][ T5740] kalmia 2-1:1.0 (unnamed net_device) (uninitialized): Unexpected init result length: 0
[  117.719876][ T5763] usb 4-1: New USB device found: idVendor=108c, idProduct=0159, bcdDevice=0.01
[  117.723688][ T5763] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  117.723715][ T5763] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  117.743278][ T5763] usb 4-1: string descriptor 0 read error: -22
[  117.743450][ T5763] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.762636][ T5740] kalmia 2-1:1.0 (unnamed net_device) (uninitialized): Did not send all of init packet. Bytes sent: 0
[  117.763217][ T5740] kalmia 2-1:1.0 (unnamed net_device) (uninitialized): Unexpected init result length: 0
[  117.768513][ T6504] capability: warning: `syz.2.224' uses deprecated v2 capabilities in a way that may be insecure
[  117.775705][ T5763] etas_es58x 4-1:1.0: Starting (null) (null) (Serial Number (null))
[  117.793363][ T5763] etas_es58x 4-1:1.0: could not retrieve the product info string
[  117.862839][ T6506] netlink: 28 bytes leftover after parsing attributes in process `syz.0.225'.
[  117.862880][ T6506] netlink: 'syz.0.225': attribute type 7 has an invalid length.
[  117.862895][ T6506] netlink: 'syz.0.225': attribute type 8 has an invalid length.
[  117.862906][ T6506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.225'.
[  117.932258][ T5740] kalmia 2-1:1.0 wwan0: register 'kalmia' at usb-dummy_hcd.1-1, Samsung Kalmia LTE USB dongle, c6:1a:2b:3f:04:ae
[  118.024844][ T5740] usb 2-1: USB disconnect, device number 4
[  118.050258][ T5740] kalmia 2-1:1.0 wwan0: unregister 'kalmia' usb-dummy_hcd.1-1, Samsung Kalmia LTE USB dongle
[  118.075578][ T6506] erspan0: entered promiscuous mode
[  118.083814][ T6506] gretap0: entered promiscuous mode
[  118.092858][ T6506] erspan0: left promiscuous mode
[  118.095431][ T6506] gretap0: left promiscuous mode
[  118.298744][ T5763] usb 4-1: USB disconnect, device number 3
[  118.330847][ T5763] etas_es58x 4-1:1.0: Disconnecting (null) (null)
[  118.640534][ T6530] FAULT_INJECTION: forcing a failure.
[  118.640534][ T6530] name failslab, interval 1, probability 0, space 0, times 0
[  118.640570][ T6530] CPU: 1 UID: 0 PID: 6530 Comm: syz.1.232 Not tainted syzkaller #0 PREEMPT(full) 
[  118.640594][ T6530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  118.640606][ T6530] Call Trace:
[  118.640615][ T6530]  <TASK>
[  118.640624][ T6530]  dump_stack_lvl+0xe8/0x150
[  118.640663][ T6530]  should_fail_ex+0x3eb/0x540
[  118.640697][ T6530]  should_failslab+0xa8/0x100
[  118.640719][ T6530]  __kmalloc_noprof+0xf9/0x710
[  118.640743][ T6530]  ? __register_sysctl_table+0xc02/0x1370
[  118.640765][ T6530]  ? __register_sysctl_table+0xc02/0x1370
[  118.640794][ T6530]  __register_sysctl_table+0xc02/0x1370
[  118.640828][ T6530]  setup_mq_sysctls+0x430/0x4b0
[  118.640854][ T6530]  copy_ipcs+0x483/0x6c0
[  118.640887][ T6530]  create_new_namespaces+0x210/0x6b0
[  118.640920][ T6530]  ? security_capable+0x7e/0x2c0
[  118.640948][ T6530]  unshare_nsproxy_namespaces+0x144/0x190
[  118.640982][ T6530]  ksys_unshare+0x532/0x890
[  118.641025][ T6530]  ? __pfx_ksys_unshare+0x10/0x10
[  118.641056][ T6530]  ? rcu_is_watching+0x16/0xb0
[  118.641098][ T6530]  __x64_sys_unshare+0x38/0x50
[  118.641115][ T6530]  do_syscall_64+0x16a/0x530
[  118.641137][ T6530]  ? trace_irq_disable+0x3b/0x140
[  118.641163][ T6530]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.641183][ T6530]  ? clear_bhb_loop+0x70/0xc0
[  118.641206][ T6530]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.641226][ T6530] RIP: 0033:0x00007fe01259fb19
[  118.641248][ T6530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  118.641264][ T6530] RSP: 002b:00007fe013473028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  118.641287][ T6530] RAX: ffffffffffffffda RBX: 00007fe012825fa0 RCX: 00007fe01259fb19
[  118.641301][ T6530] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000a000400
[  118.641314][ T6530] RBP: 00007fe012637b70 R08: 0000000000000000 R09: 0000000000000000
[  118.641326][ T6530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  118.641338][ T6530] R13: 00007fe012826038 R14: 00007fe012825fa0 R15: 00007ffd833ade08
[  118.641372][ T6530]  </TASK>
[  118.641381][ T6530] sysctl could not get directory: /fs -12
[  119.323210][ T6547] set_capacity_and_notify: 1 callbacks suppressed
[  119.323232][ T6547] loop3: detected capacity change from 0 to 128
[  119.353015][ T6544] loop4: detected capacity change from 0 to 2048
[  119.383631][ T6547] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  119.409154][ T6547] ext4 filesystem being mounted at /58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  119.469435][ T6544] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  119.469562][ T6544] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  119.555181][ T5645] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  119.802339][ T5644] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.864275][ T6537] loop2: detected capacity change from 0 to 40427
[  119.903427][ T6537] F2FS-fs (loop2): invalid crc value
[  120.291265][ T6537] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  120.316246][ T6537] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  120.553391][ T5654] CPU: 0 UID: 0 PID: 5654 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  120.553425][ T5654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  120.553437][ T5654] Call Trace:
[  120.553444][ T5654]  <TASK>
[  120.553453][ T5654]  dump_stack_lvl+0xe8/0x150
[  120.553490][ T5654]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  120.553528][ T5654]  f2fs_write_end_bio+0xf7d/0x1310
[  120.553576][ T5654]  __submit_merged_bio+0x258/0x6a0
[  120.553614][ T5654]  ? rcu_is_watching+0x16/0xb0
[  120.553649][ T5654]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  120.553684][ T5654]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  120.553744][ T5654]  __f2fs_write_data_pages+0x2cd0/0x72b0
[  120.553795][ T5654]  ? __lock_acquire+0x747/0x2de0
[  120.553844][ T5654]  ? __lock_acquire+0x747/0x2de0
[  120.553873][ T5654]  ? __lock_acquire+0x747/0x2de0
[  120.553896][ T5654]  ? __pfx___f2fs_write_data_pages+0x10/0x10
[  120.553985][ T5654]  ? rcu_is_watching+0x16/0xb0
[  120.554017][ T5654]  ? rcu_is_watching+0x16/0xb0
[  120.554041][ T5654]  ? __kasan_check_byte+0x12/0x40
[  120.554090][ T5654]  ? is_bpf_text_address+0x292/0x2b0
[  120.554110][ T5654]  ? is_bpf_text_address+0x26/0x2b0
[  120.554133][ T5654]  ? kernel_text_address+0xa5/0xe0
[  120.554154][ T5654]  ? __kernel_text_address+0xd/0x30
[  120.554173][ T5654]  ? unwind_get_return_address+0x4d/0x90
[  120.554194][ T5654]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  120.554213][ T5654]  ? arch_stack_walk+0xfb/0x150
[  120.554250][ T5654]  ? stack_trace_save+0xa9/0x100
[  120.554270][ T5654]  ? __pfx_stack_trace_save+0x10/0x10
[  120.554292][ T5654]  ? check_path+0x21/0x40
[  120.554314][ T5654]  ? check_noncircular+0xdb/0x150
[  120.554338][ T5654]  ? add_lock_to_list+0xc7/0x100
[  120.554362][ T5654]  ? lockdep_unlock+0x5c/0xd0
[  120.554377][ T5654]  ? __lock_acquire+0x1511/0x2de0
[  120.554422][ T5654]  ? do_raw_spin_lock+0x12b/0x2f0
[  120.554449][ T5654]  ? do_raw_spin_unlock+0xf5/0x200
[  120.554466][ T5654]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  120.554487][ T5654]  do_writepages+0x338/0x560
[  120.554515][ T5654]  ? do_raw_spin_unlock+0xf5/0x200
[  120.554535][ T5654]  filemap_fdatawrite+0x1e9/0x2f0
[  120.554557][ T5654]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  120.554617][ T5654]  ? do_raw_spin_unlock+0xf5/0x200
[  120.554636][ T5654]  f2fs_sync_dirty_inodes+0x471/0x970
[  120.554671][ T5654]  f2fs_write_checkpoint+0x867/0x24d0
[  120.554729][ T5654]  kill_f2fs_super+0x2df/0x700
[  120.554753][ T5654]  ? rcu_do_enqueue+0x616/0x870
[  120.554772][ T5654]  ? lockdep_hardirqs_on+0x7b/0x110
[  120.554790][ T5654]  ? __pfx_kill_f2fs_super+0x10/0x10
[  120.554828][ T5654]  ? __pfx_call_rcu+0x10/0x10
[  120.554848][ T5654]  ? shrinker_free+0x2a7/0x3b0
[  120.554868][ T5654]  deactivate_locked_super+0xbe/0x110
[  120.554891][ T5654]  cleanup_mnt+0x204/0x2a0
[  120.554918][ T5654]  task_work_run+0x1d9/0x260
[  120.554947][ T5654]  ? __pfx_task_work_run+0x10/0x10
[  120.554976][ T5654]  exit_to_user_mode_loop+0x204/0x770
[  120.554996][ T5654]  ? rcu_is_watching+0x16/0xb0
[  120.555023][ T5654]  do_syscall_64+0x32c/0x530
[  120.555040][ T5654]  ? trace_irq_disable+0x3b/0x140
[  120.555060][ T5654]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.555075][ T5654]  ? clear_bhb_loop+0x70/0xc0
[  120.555094][ T5654]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.555109][ T5654] RIP: 0033:0x00007eff2b5a0d57
[  120.555127][ T5654] Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  120.555139][ T5654] RSP: 002b:00007ffec98e4df8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  120.555157][ T5654] RAX: 0000000000000000 RBX: 00007eff2b636fb3 RCX: 00007eff2b5a0d57
[  120.555168][ T5654] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec98e4eb0
[  120.555177][ T5654] RBP: 00007ffec98e4eb0 R08: 00007ffec98e5eb0 R09: 00000000ffffffff
[  120.555187][ T5654] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffec98e5f40
[  120.555197][ T5654] R13: 00007eff2b636fb3 R14: 000000000001d659 R15: 00007ffec98e5f80
[  120.555224][ T5654]  </TASK>
[  120.589680][ T5654] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  121.012537][ T6587] loop4: detected capacity change from 0 to 512
[  121.014646][ T6564] loop0: detected capacity change from 0 to 32768
[  121.049356][ T6587] EXT4-fs error (device loop4): ext4_orphan_get:1430: comm syz.4.255: bad orphan inode 15
[  121.049390][ T6587] loop4: lost filesystem error report for type 5 error -117
[  121.054107][ T6587] ext4_test_bit(bit=14, block=5) = 0
[  121.063896][ T6587] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  121.094045][ T6587] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters
[  121.110297][   T33] audit: type=1800 audit(1793830418.390:6): pid=6564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.247" name="file1" dev="loop0" ino=7 res=0 errno=-22
[  121.122523][   T33] audit: type=1800 audit(1793830418.410:7): pid=6564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.247" name="file1" dev="loop0" ino=7 res=0 errno=-22
[  121.131291][ T6587] EXT4-fs error (device loop4): ext4_free_inode:356: comm syz.4.255: bit already cleared for inode 13
[  121.142617][ T6593] EXT4-fs error (device loop4): __ext4_new_inode:1083: comm syz.4.255: reserved inode found cleared - inode=1
[  121.346247][ T5644] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.443680][ T6590] loop1: detected capacity change from 0 to 32768
[  122.099060][ T6610] loop1: detected capacity change from 0 to 512
[  122.135567][ T6610] EXT4-fs error (device loop1): ext4_iget_extra_inode:6027: inode #15: comm syz.1.264: corrupted in-inode xattr: invalid ea_ino
[  122.135606][ T6610] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  122.135951][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  122.135973][    C0] EXT4-fs (loop1): initial error at time 1793830419: ext4_iget_extra_inode:6027: inode 15
[  122.136004][    C0] EXT4-fs (loop1): last error at time 1793830419: ext4_iget_extra_inode:6027: inode 15
[  122.189267][ T6610] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.264: couldn't read orphan inode 15 (err -117)
[  122.189302][ T6610] loop1: lost filesystem error report for type 5 error -117
[  122.212851][ T6610] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  122.254039][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  122.577622][ T6617] loop2: detected capacity change from 0 to 4096
[  122.593369][ T6619] loop3: detected capacity change from 0 to 8
[  122.621787][ T6617] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  122.786922][ T6619] zram0: detected capacity change from 0 to 2097152
[  122.875966][   T33] audit: type=1800 audit(1793830420.160:8): pid=6620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.254" name="file1" dev="loop2" ino=30 res=0 errno=-22
[  122.902297][ T5635] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.306514][ T5740] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  123.368498][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  123.476023][ T5740] usb 4-1: Using ep0 maxpacket: 32
[  123.482180][ T5740] usb 4-1: New USB device found: idVendor=108c, idProduct=0168, bcdDevice=84.b2
[  123.482254][ T5740] usb 4-1: too many configurations: 17, using maximum allowed: 8
[  123.497075][ T5740] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  123.497100][ T5740] usb 4-1: config 0 has no interface number 0
[  123.497155][ T5740] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  123.497175][ T5740] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  123.502284][ T5740] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  123.502310][ T5740] usb 4-1: config 0 has no interface number 0
[  123.502349][ T5740] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  123.502376][ T5740] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  123.505122][ T5740] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  123.505144][ T5740] usb 4-1: config 0 has no interface number 0
[  123.505182][ T5740] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  123.505199][ T5740] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  123.509406][ T5740] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  123.509429][ T5740] usb 4-1: config 0 has no interface number 0
[  123.509466][ T5740] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  123.509484][ T5740] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  123.513229][ T5740] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  123.513252][ T5740] usb 4-1: config 0 has no interface number 0
[  123.513289][ T5740] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  123.513307][ T5740] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  123.520233][ T5740] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  123.520258][ T5740] usb 4-1: config 0 has no interface number 0
[  123.520304][ T5740] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  123.520323][ T5740] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  123.521315][ T5740] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  123.521334][ T5740] usb 4-1: config 0 has no interface number 0
[  123.521377][ T5740] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  123.521395][ T5740] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  123.522606][ T5740] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  123.522624][ T5740] usb 4-1: config 0 has no interface number 0
[  123.522660][ T5740] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  123.522678][ T5740] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  123.527821][ T5740] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.527843][ T5740] usb 4-1: Product: syz
[  123.527856][ T5740] usb 4-1: Manufacturer: syz
[  123.527868][ T5740] usb 4-1: SerialNumber: syz
[  123.542398][ T5740] usb 4-1: config 0 descriptor??
[  123.571317][ T5740] etas_es58x 4-1:0.2: Starting syz syz (Serial Number syz)
[  123.846639][ T6643] EXT4-fs: Ignoring removed orlov option
[  123.863183][ T6643] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  123.863201][ T6643] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  123.899413][ T6643] EXT4-fs (loop2): 1 truncate cleaned up
[  123.904512][ T6643] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  123.941391][ T6643] EXT4-fs (loop2): shut down requested (2)
[  124.017158][ T6650] FAULT_INJECTION: forcing a failure.
[  124.017158][ T6650] name failslab, interval 1, probability 0, space 0, times 0
[  124.017190][ T6650] CPU: 0 UID: 0 PID: 6650 Comm: syz.4.280 Not tainted syzkaller #0 PREEMPT(full) 
[  124.017213][ T6650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  124.017225][ T6650] Call Trace:
[  124.017233][ T6650]  <TASK>
[  124.017243][ T6650]  dump_stack_lvl+0xe8/0x150
[  124.017289][ T6650]  should_fail_ex+0x3eb/0x540
[  124.017325][ T6650]  should_failslab+0xa8/0x100
[  124.017348][ T6650]  __kmalloc_cache_noprof+0x9e/0x600
[  124.017375][ T6650]  ? usb_control_msg+0x73/0x3e0
[  124.017399][ T6650]  ? usb_control_msg+0x73/0x3e0
[  124.017433][ T6650]  usb_control_msg+0x73/0x3e0
[  124.017468][ T6650]  hub_ext_port_status+0x112/0x840
[  124.017508][ T6650]  hub_activate+0x737/0x1ad0
[  124.017562][ T6650]  hub_resume+0xa4/0x3f0
[  124.017593][ T6650]  ? __pfx_hub_resume+0x10/0x10
[  124.017633][ T6650]  usb_resume_both+0x5f1/0xb20
[  124.017662][ T6650]  ? __pfx_usb_runtime_resume+0x10/0x10
[  124.017685][ T6650]  __rpm_callback+0x3ff/0xa80
[  124.017711][ T6650]  ? rcu_is_watching+0x16/0xb0
[  124.017742][ T6650]  ? __pfx_usb_runtime_resume+0x10/0x10
[  124.017767][ T6650]  rpm_resume+0x1074/0x1690
[  124.017795][ T6650]  ? rcu_is_watching+0x16/0xb0
[  124.017844][ T6650]  ? __pfx_rpm_resume+0x10/0x10
[  124.017884][ T6650]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  124.017922][ T6650]  __pm_runtime_resume+0x117/0x170
[  124.017956][ T6650]  usb_autoresume_device+0x23/0xf0
[  124.017980][ T6650]  usbdev_open+0x190/0x760
[  124.018009][ T6650]  ? __pfx_usbdev_open+0x10/0x10
[  124.018034][ T6650]  ? do_raw_spin_unlock+0xf5/0x200
[  124.018061][ T6650]  chrdev_open+0x4d9/0x600
[  124.018087][ T6650]  ? __pfx_chrdev_open+0x10/0x10
[  124.018108][ T6650]  ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[  124.018130][ T6650]  ? devcgroup_check_permission+0x31/0x8f0
[  124.018164][ T6650]  ? __pfx_chrdev_open+0x10/0x10
[  124.018185][ T6650]  do_dentry_open+0x80e/0x1360
[  124.018219][ T6650]  vfs_open_consume+0x4a/0x350
[  124.018239][ T6650]  ? path_openat+0x16e1/0x20f0
[  124.018270][ T6650]  path_openat+0x16fc/0x20f0
[  124.018322][ T6650]  do_file_open+0x23e/0x4a0
[  124.018358][ T6650]  ? __pfx_do_file_open+0x10/0x10
[  124.018413][ T6650]  ? _raw_spin_unlock+0x28/0x50
[  124.018433][ T6650]  ? alloc_fd+0x6af/0x760
[  124.018473][ T6650]  do_sys_openat2+0x115/0x200
[  124.018500][ T6650]  ? __pfx_do_sys_openat2+0x10/0x10
[  124.018532][ T6650]  ? do_user_addr_fault+0xd3f/0x1480
[  124.018562][ T6650]  __x64_sys_openat+0x138/0x170
[  124.018593][ T6650]  do_syscall_64+0x16a/0x530
[  124.018616][ T6650]  ? trace_irq_disable+0x3b/0x140
[  124.018642][ T6650]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.018662][ T6650]  ? clear_bhb_loop+0x70/0xc0
[  124.018688][ T6650]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.018708][ T6650] RIP: 0033:0x00007fa8c996034e
[  124.018731][ T6650] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  124.018747][ T6650] RSP: 002b:00007fa8c7bf5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  124.018771][ T6650] RAX: ffffffffffffffda RBX: 00007fa8c7bf66c0 RCX: 00007fa8c996034e
[  124.018785][ T6650] RDX: 0000000000101301 RSI: 00007fa8c7bf5c00 RDI: ffffffffffffff9c
[  124.018799][ T6650] RBP: 00007fa8c7bf5c00 R08: 0000000000000000 R09: 0000000000000000
[  124.018812][ T6650] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  124.018825][ T6650] R13: 00007fa8c9c26038 R14: 00007fa8c9c25fa0 R15: 00007fff882a2b48
[  124.018861][ T6650]  </TASK>
[  124.024845][ T5654] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.295421][ T5740] etas_es58x 4-1:0.2: could not retrieve the product info string
[  124.371545][ T1226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  124.452072][ T6659] batadv_slave_0: entered promiscuous mode
[  124.465919][ T6658] batadv_slave_0: left promiscuous mode
[  124.483035][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  124.488504][ T5740] usb 4-1: USB disconnect, device number 4
[  124.520065][ T5740] etas_es58x 4-1:0.2: Disconnecting syz syz
[  124.844063][ T6671] set_capacity_and_notify: 1 callbacks suppressed
[  124.844084][ T6671] loop0: detected capacity change from 0 to 1024
[  124.864201][ T6671] EXT4-fs: Ignoring removed i_version option
[  124.941264][ T6671] EXT4-fs (loop0): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  124.943741][   T33] audit: type=1326 audit(1793830422.230:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6673 comm="syz.4.292" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c999fb19 code=0x7ffc0000
[  124.986504][   T33] audit: type=1326 audit(1793830422.280:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6673 comm="syz.4.292" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c999fb19 code=0x7ffc0000
[  124.998423][   T33] audit: type=1326 audit(1793830422.280:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6673 comm="syz.4.292" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c999fb19 code=0x7ffc0000
[  124.998697][   T33] audit: type=1326 audit(1793830422.280:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6673 comm="syz.4.292" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c999fb19 code=0x7ffc0000
[  124.999670][   T33] audit: type=1326 audit(1793830422.280:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6673 comm="syz.4.292" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fa8c999fb19 code=0x7ffc0000
[  124.999711][   T33] audit: type=1326 audit(1793830422.280:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6673 comm="syz.4.292" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c999fb19 code=0x7ffc0000
[  124.999748][   T33] audit: type=1326 audit(1793830422.280:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6673 comm="syz.4.292" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8c999fb19 code=0x7ffc0000
[  125.133667][ T6671] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 12. Delete some EAs or run e2fsck.
[  125.241073][ T5641] EXT4-fs (loop0): unmounting filesystem 00000000-0500-0000-0000-000000000000.
[  125.441804][ T6694] ip_tables: iptables: counters copy to user failed while replacing table
[  125.492842][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  125.492877][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  125.493050][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  125.542211][ T6697] ip6gretap1: entered allmulticast mode
[  125.549976][ T6697] batman_adv: batadv0: Adding interface: ip6gretap1
[  125.549993][ T6697] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  125.550020][ T6697] batman_adv: batadv0: Interface activated: ip6gretap1
[  125.563834][ T6699] FAULT_INJECTION: forcing a failure.
[  125.563834][ T6699] name failslab, interval 1, probability 0, space 0, times 0
[  125.563862][ T6699] CPU: 1 UID: 0 PID: 6699 Comm: syz.2.302 Not tainted syzkaller #0 PREEMPT(full) 
[  125.563882][ T6699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  125.563892][ T6699] Call Trace:
[  125.563900][ T6699]  <TASK>
[  125.563907][ T6699]  dump_stack_lvl+0xe8/0x150
[  125.563942][ T6699]  should_fail_ex+0x3eb/0x540
[  125.563972][ T6699]  should_failslab+0xa8/0x100
[  125.563995][ T6699]  ? security_file_alloc+0x34/0x310
[  125.564021][ T6699]  kmem_cache_alloc_noprof+0x9c/0x600
[  125.564043][ T6699]  ? rcu_is_watching+0x16/0xb0
[  125.564069][ T6699]  ? security_file_alloc+0x34/0x310
[  125.564100][ T6699]  security_file_alloc+0x34/0x310
[  125.564128][ T6699]  init_file+0x90/0x2b0
[  125.564151][ T6699]  alloc_empty_file+0x74/0x1d0
[  125.564173][ T6699]  alloc_file_pseudo+0x110/0x1e0
[  125.564198][ T6699]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  125.564224][ T6699]  ? alloc_anon_inode+0x194/0x330
[  125.564251][ T6699]  aio_setup_ring+0x1eb/0xe20
[  125.564279][ T6699]  ? pcpu_alloc_noprof+0x1002/0x1810
[  125.564299][ T6699]  ? __pfx_aio_setup_ring+0x10/0x10
[  125.564329][ T6699]  ioctx_alloc+0x313/0x830
[  125.564346][ T6699]  ? __might_fault+0xaf/0x130
[  125.564378][ T6699]  __se_sys_io_setup+0x7b/0x1d0
[  125.564405][ T6699]  do_syscall_64+0x16a/0x530
[  125.564425][ T6699]  ? trace_irq_disable+0x3b/0x140
[  125.564448][ T6699]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.564467][ T6699]  ? clear_bhb_loop+0x70/0xc0
[  125.564491][ T6699]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.564508][ T6699] RIP: 0033:0x00007eff2b59fb19
[  125.564528][ T6699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  125.564542][ T6699] RSP: 002b:00007eff2c50f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[  125.564563][ T6699] RAX: ffffffffffffffda RBX: 00007eff2b825fa0 RCX: 00007eff2b59fb19
[  125.564576][ T6699] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 000000000000239f
[  125.564588][ T6699] RBP: 00007eff2b637b70 R08: 0000000000000000 R09: 0000000000000000
[  125.564599][ T6699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  125.564609][ T6699] R13: 00007eff2b826038 R14: 00007eff2b825fa0 R15: 00007ffec98e5b88
[  125.564641][ T6699]  </TASK>
[  125.641334][ T1226] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  125.866029][ T1226] usb 1-1: Using ep0 maxpacket: 16
[  125.866841][ T1226] usb 1-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00
[  125.868044][ T1226] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  125.868072][ T1226] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  125.868093][ T1226] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  125.868130][ T1226] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.875585][ T1226] usb 1-1: config 0 descriptor??
[  126.127990][ T5855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  126.244756][ T6711] loop4: detected capacity change from 0 to 2048
[  126.336042][ T6711] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  126.411286][ T6711] EXT4-fs (loop4): shut down requested (0)
[  126.484782][ T1226] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0002/input/input6
[  126.552570][ T1226] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  126.586999][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  126.612734][ T5644] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  126.711427][ T6706] loop2: detected capacity change from 0 to 40427
[  126.742956][ T6706] F2FS-fs (loop2): invalid crc value
[  126.879927][ T6732] FAULT_INJECTION: forcing a failure.
[  126.879927][ T6732] name failslab, interval 1, probability 0, space 0, times 0
[  126.879959][ T6732] CPU: 0 UID: 0 PID: 6732 Comm: syz.4.313 Not tainted syzkaller #0 PREEMPT(full) 
[  126.879981][ T6732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  126.879993][ T6732] Call Trace:
[  126.880001][ T6732]  <TASK>
[  126.880011][ T6732]  dump_stack_lvl+0xe8/0x150
[  126.880061][ T6732]  should_fail_ex+0x3eb/0x540
[  126.880096][ T6732]  should_failslab+0xa8/0x100
[  126.880120][ T6732]  __kmalloc_cache_noprof+0x9e/0x600
[  126.880149][ T6732]  ? fuse_dev_chan_new+0x65/0x4b0
[  126.880168][ T6732]  ? fuse_dev_chan_new+0x65/0x4b0
[  126.880196][ T6732]  ? __pfx_cuse_channel_open+0x10/0x10
[  126.880226][ T6732]  fuse_dev_chan_new+0x65/0x4b0
[  126.880254][ T6732]  ? __pfx_cuse_channel_open+0x10/0x10
[  126.880282][ T6732]  cuse_channel_open+0x1f/0x7a0
[  126.880318][ T6732]  ? __pfx_cuse_channel_open+0x10/0x10
[  126.880346][ T6732]  misc_open+0x2d5/0x350
[  126.880378][ T6732]  chrdev_open+0x4d9/0x600
[  126.880403][ T6732]  ? __pfx_chrdev_open+0x10/0x10
[  126.880424][ T6732]  ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[  126.880444][ T6732]  ? devcgroup_check_permission+0x31/0x8f0
[  126.880477][ T6732]  ? __pfx_chrdev_open+0x10/0x10
[  126.880498][ T6732]  do_dentry_open+0x80e/0x1360
[  126.880532][ T6732]  vfs_open_consume+0x4a/0x350
[  126.880553][ T6732]  ? path_openat+0x16e1/0x20f0
[  126.880583][ T6732]  path_openat+0x16fc/0x20f0
[  126.880632][ T6732]  do_file_open+0x23e/0x4a0
[  126.880670][ T6732]  ? __pfx_do_file_open+0x10/0x10
[  126.880721][ T6732]  ? _raw_spin_unlock+0x28/0x50
[  126.880741][ T6732]  ? alloc_fd+0x6af/0x760
[  126.880781][ T6732]  do_sys_openat2+0x115/0x200
[  126.880804][ T6732]  ? __se_sys_futex+0x3a8/0x450
[  126.880825][ T6732]  ? __pfx_do_sys_openat2+0x10/0x10
[  126.880856][ T6732]  ? rcu_is_watching+0x16/0xb0
[  126.880889][ T6732]  __x64_sys_openat+0x138/0x170
[  126.880918][ T6732]  do_syscall_64+0x16a/0x530
[  126.880939][ T6732]  ? trace_irq_disable+0x3b/0x140
[  126.880966][ T6732]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.880986][ T6732]  ? clear_bhb_loop+0x70/0xc0
[  126.881011][ T6732]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.881040][ T6732] RIP: 0033:0x00007fa8c999fb19
[  126.881061][ T6732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  126.881078][ T6732] RSP: 002b:00007fa8c7bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  126.881101][ T6732] RAX: ffffffffffffffda RBX: 00007fa8c9c25fa0 RCX: 00007fa8c999fb19
[  126.881116][ T6732] RDX: 0000000000002842 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  126.881128][ T6732] RBP: 00007fa8c9a37b70 R08: 0000000000000000 R09: 0000000000000000
[  126.881140][ T6732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  126.881151][ T6732] R13: 00007fa8c9c26038 R14: 00007fa8c9c25fa0 R15: 00007fff882a2b48
[  126.881185][ T6732]  </TASK>
[  126.881844][ T5763] usb 1-1: USB disconnect, device number 2
[  127.267904][ T6737] loop4: detected capacity change from 0 to 2048
[  127.313370][ T6706] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  127.331434][ T6706] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  127.333930][ T6737] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  127.334086][ T6737] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  127.514545][ T6745] jffs2: notice: (6745) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  127.515617][ T5654] bio_check_eod: 105 callbacks suppressed
[  127.515634][ T5654] syz-executor: attempt to access beyond end of device
[  127.515634][ T5654] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  127.524586][ T5644] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.579261][ T5654] CPU: 0 UID: 0 PID: 5654 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  127.579295][ T5654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  127.579307][ T5654] Call Trace:
[  127.579316][ T5654]  <TASK>
[  127.579325][ T5654]  dump_stack_lvl+0xe8/0x150
[  127.579382][ T5654]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  127.579440][ T5654]  f2fs_write_end_bio+0xf7d/0x1310
[  127.579487][ T5654]  __submit_merged_bio+0x258/0x6a0
[  127.579507][ T5654]  ? rcu_is_watching+0x16/0xb0
[  127.579542][ T5654]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  127.579575][ T5654]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  127.579632][ T5654]  __f2fs_write_data_pages+0x2cd0/0x72b0
[  127.579680][ T5654]  ? __lock_acquire+0x747/0x2de0
[  127.579729][ T5654]  ? __lock_acquire+0x747/0x2de0
[  127.579757][ T5654]  ? __lock_acquire+0x747/0x2de0
[  127.579781][ T5654]  ? __pfx___f2fs_write_data_pages+0x10/0x10
[  127.579859][ T5654]  ? rcu_is_watching+0x16/0xb0
[  127.579890][ T5654]  ? rcu_is_watching+0x16/0xb0
[  127.579914][ T5654]  ? __kasan_check_byte+0x12/0x40
[  127.579965][ T5654]  ? is_bpf_text_address+0x292/0x2b0
[  127.579986][ T5654]  ? is_bpf_text_address+0x26/0x2b0
[  127.580011][ T5654]  ? kernel_text_address+0xa5/0xe0
[  127.580036][ T5654]  ? __kernel_text_address+0xd/0x30
[  127.580060][ T5654]  ? unwind_get_return_address+0x4d/0x90
[  127.580086][ T5654]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  127.580111][ T5654]  ? arch_stack_walk+0xfb/0x150
[  127.580151][ T5654]  ? stack_trace_save+0xa9/0x100
[  127.580174][ T5654]  ? __pfx_stack_trace_save+0x10/0x10
[  127.580202][ T5654]  ? check_path+0x21/0x40
[  127.580235][ T5654]  ? add_lock_to_list+0xc7/0x100
[  127.580265][ T5654]  ? lockdep_unlock+0x5c/0xd0
[  127.580284][ T5654]  ? __lock_acquire+0x1511/0x2de0
[  127.580340][ T5654]  ? do_raw_spin_lock+0x12b/0x2f0
[  127.580374][ T5654]  ? do_raw_spin_unlock+0xf5/0x200
[  127.580395][ T5654]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  127.580429][ T5654]  do_writepages+0x338/0x560
[  127.580464][ T5654]  ? do_raw_spin_unlock+0xf5/0x200
[  127.580490][ T5654]  filemap_fdatawrite+0x1e9/0x2f0
[  127.580518][ T5654]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  127.580593][ T5654]  ? do_raw_spin_unlock+0xf5/0x200
[  127.580617][ T5654]  f2fs_sync_dirty_inodes+0x471/0x970
[  127.580656][ T5654]  f2fs_write_checkpoint+0x867/0x24d0
[  127.580719][ T5654]  kill_f2fs_super+0x2df/0x700
[  127.580748][ T5654]  ? rcu_do_enqueue+0x616/0x870
[  127.580769][ T5654]  ? lockdep_hardirqs_on+0x7b/0x110
[  127.580791][ T5654]  ? __pfx_kill_f2fs_super+0x10/0x10
[  127.580831][ T5654]  ? __pfx_call_rcu+0x10/0x10
[  127.580856][ T5654]  ? shrinker_free+0x2a7/0x3b0
[  127.580879][ T5654]  deactivate_locked_super+0xbe/0x110
[  127.580906][ T5654]  cleanup_mnt+0x204/0x2a0
[  127.580938][ T5654]  task_work_run+0x1d9/0x260
[  127.580965][ T5654]  ? __pfx_task_work_run+0x10/0x10
[  127.580997][ T5654]  exit_to_user_mode_loop+0x204/0x770
[  127.581018][ T5654]  ? rcu_is_watching+0x16/0xb0
[  127.581046][ T5654]  do_syscall_64+0x32c/0x530
[  127.581064][ T5654]  ? trace_irq_disable+0x3b/0x140
[  127.581086][ T5654]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.581103][ T5654]  ? clear_bhb_loop+0x70/0xc0
[  127.581124][ T5654]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.581139][ T5654] RIP: 0033:0x00007eff2b5a0d57
[  127.581159][ T5654] Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  127.581174][ T5654] RSP: 002b:00007ffec98e4df8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  127.581196][ T5654] RAX: 0000000000000000 RBX: 00007eff2b636fb3 RCX: 00007eff2b5a0d57
[  127.581209][ T5654] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec98e4eb0
[  127.581220][ T5654] RBP: 00007ffec98e4eb0 R08: 00007ffec98e5eb0 R09: 00000000ffffffff
[  127.581232][ T5654] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffec98e5f40
[  127.581243][ T5654] R13: 00007eff2b636fb3 R14: 000000000001f161 R15: 00007ffec98e5f80
[  127.581275][ T5654]  </TASK>
[  127.581382][ T5654] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  127.684158][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  127.872046][ T6753] loop0: detected capacity change from 0 to 256
[  127.984210][ T6753] netlink: 'syz.0.321': attribute type 3 has an invalid length.
[  127.984232][ T6753] netlink: 72 bytes leftover after parsing attributes in process `syz.0.321'.
[  128.234191][ T6761] loop3: detected capacity change from 0 to 1024
[  128.306964][ T1226] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  128.351749][ T6767] loop0: detected capacity change from 0 to 1024
[  128.361421][ T6767] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869)
[  128.370023][ T6767] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002]
[  128.375492][ T6767] System zones: 0-1, 3-36
[  128.375771][ T6767] EXT4-fs (loop0): orphan cleanup on readonly fs
[  128.393989][ T6761] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  128.443638][ T6767] EXT4-fs (loop0): 1 orphan inode deleted
[  128.461268][ T6767] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  128.480434][ T1226] usb 2-1: New USB device found: idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  128.481502][ T1226] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.510939][ T1226] usb 2-1: config 0 descriptor??
[  128.522019][ T6767] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002]
[  128.522758][ T6767] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  128.539741][ T1226] cp210x 2-1:0.0: cp210x converter detected
[  128.540100][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  128.608924][ T6767] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:521: comm syz.0.327: Block bitmap for bg 0 marked uninitialized
[  128.633897][ T6767] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:521: comm syz.0.327: Block bitmap for bg 0 marked uninitialized
[  128.663584][ T6771] mmap: syz.4.328 (6771) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  128.668601][ T6767] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:521: comm syz.0.327: Block bitmap for bg 0 marked uninitialized
[  128.700031][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  128.817111][ T6775] loop2: detected capacity change from 0 to 512
[  128.823503][ T6775] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  128.823523][ T6775] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  128.828127][ T5641] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.891850][ T6775] EXT4-fs (loop2): 1 truncate cleaned up
[  128.915308][ T6775] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  128.951397][ T1226] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  128.984226][ T1226] usb 2-1: cp210x converter now attached to ttyUSB0
[  129.173645][ T5763] usb 2-1: USB disconnect, device number 5
[  129.195182][ T5654] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.253444][ T5763] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  129.264260][ T5763] cp210x 2-1:0.0: device disconnected
[  129.307045][ T6785] sock: sock_set_timeout: `syz.2.332' (pid 6785) tries to set negative timeout
[  129.403487][ T6788] loop0: detected capacity change from 0 to 1024
[  129.453619][ T6788] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  129.453751][ T6788] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  129.593070][ T5641] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  129.753637][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  129.771419][ T6797] netlink: 80 bytes leftover after parsing attributes in process `syz.2.337'.
[  129.811541][ T6797] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[  129.811778][ T6797] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[  129.968085][ T6793] loop3: detected capacity change from 0 to 32768
[  130.010461][ T6793] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  130.238220][ T6793] XFS (loop3): Ending clean mount
[  130.261719][ T6793] XFS (loop3): Quotacheck needed: Please wait.
[  130.578093][ T6793] XFS (loop3): Quotacheck: Done.
[  130.691408][ T5645] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  130.781975][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  131.079832][ T6845] loop2: detected capacity change from 0 to 512
[  131.106757][ T6829] loop4: detected capacity change from 0 to 40427
[  131.122791][ T6829] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  131.122820][ T6829] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  131.167771][ T6829] F2FS-fs (loop4): invalid crc value
[  131.498107][ T6841] loop0: detected capacity change from 0 to 32768
[  131.535698][ T6841] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.355 (6841)
[  131.590724][ T6829] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  131.594626][ T6841] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  131.594663][ T6841] BTRFS info (device loop0): using crc32c checksum algorithm
[  131.599754][ T1226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  131.667683][ T6829] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  131.667714][ T6829] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  131.776690][ T6841] BTRFS info (device loop0): setting nodatasum
[  131.776722][ T6841] BTRFS info (device loop0): enabling ssd optimizations
[  131.776739][ T6841] BTRFS info (device loop0): disabling tree log
[  131.776754][ T6841] BTRFS info (device loop0): turning on async discard
[  131.776770][ T6841] BTRFS info (device loop0): enabling free space tree
[  131.776786][ T6841] BTRFS info (device loop0): force zstd compression, level 3
[  131.776805][ T6841] BTRFS info (device loop0): max_inline set to 0
[  131.858817][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  132.118638][   T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  132.267020][   T10] usb 4-1: Using ep0 maxpacket: 8
[  132.270985][   T10] usb 4-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  132.281882][   T10] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  132.281921][   T10] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  132.281955][   T10] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  132.281979][   T10] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  132.282001][   T10] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  132.282024][   T10] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  132.282046][   T10] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  132.282069][   T10] usb 4-1: config 168 interface 0 has no altsetting 0
[  132.286450][   T10] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  132.286496][   T10] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  132.286540][   T10] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  132.286565][   T10] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  132.286586][   T10] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  132.286607][   T10] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  132.286630][   T10] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  132.286653][   T10] usb 4-1: config 168 interface 0 has no altsetting 0
[  132.290494][   T10] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  132.290526][   T10] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  132.290560][   T10] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  132.290583][   T10] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  132.290604][   T10] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  132.290626][   T10] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  132.290649][   T10] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  132.290671][   T10] usb 4-1: config 168 interface 0 has no altsetting 0
[  132.299848][   T10] usb 4-1: string descriptor 0 read error: -22
[  132.299984][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.409165][   T10] adutux 4-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  132.519504][ T6841] BTRFS info (device loop0): balance: start -s
[  132.600531][ T6841] BTRFS info (device loop0): relocating block group 1048576 flags system
[  132.725402][ T6843] loop1: detected capacity change from 0 to 32768
[  132.774954][   T10] usb 4-1: USB disconnect, device number 5
[  132.806472][ T6841] BTRFS info (device loop0): balance: ended with status: 0
[  132.837742][ T6843] XFS (loop1): Mounting V5 Filesystem 6b3d8c96-b8b2-4f73-8344-2893082bca0b
[  132.887641][ T6887] loop2: detected capacity change from 0 to 8
[  132.957490][ T6887] SQUASHFS error: lzo decompression failed, data probably corrupt
[  132.957539][ T6887] SQUASHFS error: Failed to read block 0x91: -5
[  132.957553][ T6887] SQUASHFS error: Unable to read metadata cache entry [8f]
[  132.957566][ T6887] SQUASHFS error: Unable to read inode 0x11f
[  132.958757][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  133.043532][ T5641] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  133.175695][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  133.175810][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  133.192619][ T6843] XFS (loop1): Ending clean mount
[  133.297229][ T6890] libceph: resolve '27' (ret=-3): failed
[  133.307915][ T5635] XFS (loop1): Unmounting Filesystem 6b3d8c96-b8b2-4f73-8344-2893082bca0b
[  133.492659][ T6894] input: syz1 as /devices/virtual/input/input7
[  133.615780][ T6898] capability: warning: `syz.4.366' uses 32-bit capabilities (legacy support in use)
[  133.960232][ T6904] loop2: detected capacity change from 0 to 2048
[  134.002821][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  134.029601][ T6904] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  134.032815][   T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  134.219139][ T6912] overlay: Unknown parameter '\owerdir'
[  134.219559][   T10] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  134.606622][ T5855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  134.729246][ T6922] loop4: detected capacity change from 0 to 1024
[  135.027030][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  135.060741][ T6919] loop1: detected capacity change from 0 to 32768
[  135.063733][ T6919] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.373 (6919)
[  135.100897][ T6919] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  135.100933][ T6919] BTRFS info (device loop1): using sha256 checksum algorithm
[  135.247760][ T6919] BTRFS info (device loop1): enabling ssd optimizations
[  135.247790][ T6919] BTRFS info (device loop1): turning on async discard
[  135.247806][ T6919] BTRFS info (device loop1): enabling free space tree
[  135.370660][ T6946] sctp: [Deprecated]: syz.3.380 (pid 6946) Use of int in max_burst socket option.
[  135.370660][ T6946] Use struct sctp_assoc_value instead
[  135.510318][ T5635] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  135.730185][ T5855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  135.903530][ T6953] loop3: detected capacity change from 0 to 256
[  136.071083][ T1013] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.088866][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  136.254132][ T6964] loop0: detected capacity change from 0 to 128
[  136.536916][ T6964] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  136.536955][ T6964] hpfs: filesystem error: improperly stopped
[  136.536969][ T6964] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  136.536984][ T6964] hpfs: You really don't want any checks? You are crazy...
[  136.536996][ T6964] hpfs: Code page index out of array
[  136.537004][ T6964] hpfs: code page support is disabled
[  136.602551][ T6964] hpfs: hpfs_map_4sectors(): unaligned read
[  136.602962][ T6964] hpfs: hpfs_map_4sectors(): unaligned read
[  136.602975][ T6964] hpfs: filesystem error: unable to find root dir
[  136.871007][ T1013] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.139014][   T46] kworker/u8:2: attempt to access beyond end of device
[  137.139014][   T46] loop3: rw=1, sector=1832, nr_sectors = 32 limit=256
[  137.139196][   T46] kworker/u8:2: attempt to access beyond end of device
[  137.139196][   T46] loop3: rw=1, sector=1896, nr_sectors = 32 limit=256
[  137.139368][   T46] kworker/u8:2: attempt to access beyond end of device
[  137.139368][   T46] loop3: rw=1, sector=1960, nr_sectors = 32 limit=256
[  137.139514][   T46] kworker/u8:2: attempt to access beyond end of device
[  137.139514][   T46] loop3: rw=1, sector=2024, nr_sectors = 32 limit=256
[  137.139654][   T46] kworker/u8:2: attempt to access beyond end of device
[  137.139654][   T46] loop3: rw=1, sector=2088, nr_sectors = 32 limit=256
[  137.139793][   T46] kworker/u8:2: attempt to access beyond end of device
[  137.139793][   T46] loop3: rw=1, sector=2152, nr_sectors = 32 limit=256
[  137.139926][   T46] kworker/u8:2: attempt to access beyond end of device
[  137.139926][   T46] loop3: rw=1, sector=2216, nr_sectors = 32 limit=256
[  137.140106][   T46] kworker/u8:2: attempt to access beyond end of device
[  137.140106][   T46] loop3: rw=1, sector=2280, nr_sectors = 32 limit=256
[  137.140244][   T46] kworker/u8:2: attempt to access beyond end of device
[  137.140244][   T46] loop3: rw=1, sector=2344, nr_sectors = 32 limit=256
[  137.190156][   T46] kworker/u8:2: attempt to access beyond end of device
[  137.190156][   T46] loop3: rw=1, sector=2408, nr_sectors = 32 limit=256
[  137.193558][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  137.241750][ T6961] loop2: detected capacity change from 0 to 131072
[  137.256035][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  137.269756][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  137.275815][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  137.277656][ T6961] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0)
[  137.277678][ T6961] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  137.279473][ T6961] F2FS-fs (loop2): invalid crc value
[  137.283440][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  137.284081][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  137.383339][ T6961] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  137.435749][ T6961] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  137.435781][ T6961] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  137.602359][ T1013] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.648925][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  137.902305][ T1013] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.993372][ T6967] loop1: detected capacity change from 0 to 32768
[  138.003456][ T6967] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.390 (6967)
[  138.033998][ T6967] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  138.034046][ T6967] BTRFS info (device loop1): using crc32c checksum algorithm
[  138.226395][ T5740] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  138.249051][ T6967] BTRFS info (device loop1): enabling ssd optimizations
[  138.249083][ T6967] BTRFS info (device loop1): turning on flush-on-commit
[  138.249100][ T6967] BTRFS info (device loop1): enabling free space tree
[  138.249116][ T6967] BTRFS info (device loop1): enabling auto defrag
[  138.249135][ T6967] BTRFS info (device loop1): use lzo compression, level 1
[  138.249155][ T6967] BTRFS info (device loop1): max_inline set to 4096
[  138.295179][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  138.377713][ T6967] BTRFS critical (device loop1 state EH): emergency shutdown
[  138.402447][ T5740] usb 1-1: Using ep0 maxpacket: 16
[  138.404774][ T5740] usb 1-1: New USB device found: idVendor=0572, idProduct=cb00, bcdDevice=bb.c9
[  138.423738][ T5740] usb 1-1: config 251 has an invalid interface number: 202 but max is 0
[  138.423770][ T5740] usb 1-1: config 251 has no interface number 0
[  138.423833][ T5740] usb 1-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16
[  138.423858][ T5740] usb 1-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  138.423880][ T5740] usb 1-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[  138.423905][ T5740] usb 1-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81
[  138.423931][ T5740] usb 1-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid maxpacket 40960, setting to 1024
[  138.423957][ T5740] usb 1-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  138.423983][ T5740] usb 1-1: config 251 interface 202 has no altsetting 0
[  138.435369][ T5740] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.435394][ T5740] usb 1-1: Product: syz
[  138.435407][ T5740] usb 1-1: Manufacturer: syz
[  138.435419][ T5740] usb 1-1: SerialNumber: syz
[  138.471377][ T6987] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  138.551478][ T1013] bridge_slave_1: left allmulticast mode
[  138.551551][ T1013] bridge_slave_1: left promiscuous mode
[  138.572006][ T1013] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.584818][ T5635] BTRFS info (device loop1 state EH): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  138.668971][ T1013] bridge_slave_0: left allmulticast mode
[  138.669002][ T1013] bridge_slave_0: left promiscuous mode
[  138.669245][ T1013] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.759921][ T5740] cxacru 1-1:251.202: cxacru_bind: interface has incorrect endpoints
[  138.760074][ T5740] cxacru 1-1:251.202: usbatm_usb_probe: bind failed: -19!
[  138.797418][ T1013] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  138.819482][ T5740] usb 1-1: USB disconnect, device number 3
[  139.229198][ T1013] batman_adv: batadv0: Removing interface: ip6gretap1
[  139.346854][ T5369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  139.406090][   T55] Bluetooth: hci2: command tx timeout
[  139.601213][ T1013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  139.631933][ T1013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  139.635616][ T1013] bond0 (unregistering): Released all slaves
[  139.874203][ T7031] FAULT_INJECTION: forcing a failure.
[  139.874203][ T7031] name failslab, interval 1, probability 0, space 0, times 0
[  139.874238][ T7031] CPU: 0 UID: 0 PID: 7031 Comm: syz.1.404 Not tainted syzkaller #0 PREEMPT(full) 
[  139.874262][ T7031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  139.874275][ T7031] Call Trace:
[  139.874283][ T7031]  <TASK>
[  139.874293][ T7031]  dump_stack_lvl+0xe8/0x150
[  139.874333][ T7031]  should_fail_ex+0x3eb/0x540
[  139.874368][ T7031]  should_failslab+0xa8/0x100
[  139.874391][ T7031]  __kmalloc_cache_noprof+0x9e/0x600
[  139.874419][ T7031]  ? fuse_chan_new+0x4e/0x2f0
[  139.874437][ T7031]  ? fuse_chan_new+0x4e/0x2f0
[  139.874462][ T7031]  ? __pfx_cuse_channel_open+0x10/0x10
[  139.874490][ T7031]  fuse_chan_new+0x4e/0x2f0
[  139.874510][ T7031]  ? __pfx_cuse_channel_open+0x10/0x10
[  139.874537][ T7031]  fuse_dev_chan_new+0x1c/0x4b0
[  139.874565][ T7031]  ? __pfx_cuse_channel_open+0x10/0x10
[  139.874594][ T7031]  cuse_channel_open+0x1f/0x7a0
[  139.874626][ T7031]  ? __pfx_cuse_channel_open+0x10/0x10
[  139.874652][ T7031]  misc_open+0x2d5/0x350
[  139.874682][ T7031]  chrdev_open+0x4d9/0x600
[  139.874707][ T7031]  ? __pfx_chrdev_open+0x10/0x10
[  139.874728][ T7031]  ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[  139.874750][ T7031]  ? devcgroup_check_permission+0x31/0x8f0
[  139.874781][ T7031]  ? __pfx_chrdev_open+0x10/0x10
[  139.874800][ T7031]  do_dentry_open+0x80e/0x1360
[  139.874832][ T7031]  vfs_open_consume+0x4a/0x350
[  139.874853][ T7031]  ? path_openat+0x16e1/0x20f0
[  139.874891][ T7031]  path_openat+0x16fc/0x20f0
[  139.874940][ T7031]  do_file_open+0x23e/0x4a0
[  139.874985][ T7031]  ? __pfx_do_file_open+0x10/0x10
[  139.875040][ T7031]  ? _raw_spin_unlock+0x28/0x50
[  139.875061][ T7031]  ? alloc_fd+0x6af/0x760
[  139.875102][ T7031]  do_sys_openat2+0x115/0x200
[  139.875126][ T7031]  ? __se_sys_futex+0x3a8/0x450
[  139.875149][ T7031]  ? __pfx_do_sys_openat2+0x10/0x10
[  139.875179][ T7031]  ? rcu_is_watching+0x16/0xb0
[  139.875215][ T7031]  __x64_sys_openat+0x138/0x170
[  139.875244][ T7031]  do_syscall_64+0x16a/0x530
[  139.875275][ T7031]  ? trace_irq_disable+0x3b/0x140
[  139.875300][ T7031]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.875321][ T7031]  ? clear_bhb_loop+0x70/0xc0
[  139.875345][ T7031]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.875364][ T7031] RIP: 0033:0x00007fe01259fb19
[  139.875394][ T7031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  139.875412][ T7031] RSP: 002b:00007fe013473028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  139.875436][ T7031] RAX: ffffffffffffffda RBX: 00007fe012825fa0 RCX: 00007fe01259fb19
[  139.875452][ T7031] RDX: 0000000000000002 RSI: 0000200000000300 RDI: ffffffffffffff9c
[  139.875466][ T7031] RBP: 00007fe012637b70 R08: 0000000000000000 R09: 0000000000000000
[  139.875487][ T7031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  139.875499][ T7031] R13: 00007fe012826038 R14: 00007fe012825fa0 R15: 00007ffd833ade08
[  139.875537][ T7031]  </TASK>
[  140.345567][ T7043] netlink: 'syz.1.407': attribute type 1 has an invalid length.
[  140.421227][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  140.543464][ T7053] loop3: detected capacity change from 0 to 256
[  140.613844][ T7043] 8021q: adding VLAN 0 to HW filter on device bond1
[  140.649668][ T7056] evm: overlay not supported
[  140.688973][ T1226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  140.973856][ T7060] loop0: detected capacity change from 0 to 256
[  141.340227][ T6968] rxe_eth0 speed is unknown, defaulting to 1000
[  141.486325][   T55] Bluetooth: hci2: command tx timeout
[  141.488817][  T945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  141.575446][ T5298] 8021q: adding VLAN 0 to HW filter on device eth1
[  142.387585][ T7051] loop2: detected capacity change from 0 to 65536
[  142.536113][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  142.545224][ T7051] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  142.639565][ T7051] XFS (loop2): Ending clean mount
[  142.727535][ T5855] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  142.781309][ T7051] XFS (loop2): Quotacheck needed: Please wait.
[  142.876835][ T5855] usb 1-1: New USB device found: idVendor=0711, idProduct=0900, bcdDevice=1.00
[  142.878227][ T5855] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  142.878254][ T5855] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  142.882445][ T5855] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.882474][ T5855] usb 1-1: Product: syz
[  142.882489][ T5855] usb 1-1: Manufacturer: syz
[  142.882503][ T5855] usb 1-1: SerialNumber: syz
[  143.056656][ T7113] FAULT_INJECTION: forcing a failure.
[  143.056656][ T7113] name failslab, interval 1, probability 0, space 0, times 0
[  143.056695][ T7113] CPU: 1 UID: 0 PID: 7113 Comm: syz.1.426 Not tainted syzkaller #0 PREEMPT(full) 
[  143.056721][ T7113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  143.056736][ T7113] Call Trace:
[  143.056744][ T7113]  <TASK>
[  143.056754][ T7113]  dump_stack_lvl+0xe8/0x150
[  143.056795][ T7113]  should_fail_ex+0x3eb/0x540
[  143.056831][ T7113]  should_failslab+0xa8/0x100
[  143.056861][ T7113]  __kmalloc_noprof+0xf9/0x710
[  143.056891][ T7113]  ? security_sk_alloc+0x52/0x360
[  143.056919][ T7113]  ? security_sk_alloc+0x52/0x360
[  143.056956][ T7113]  security_sk_alloc+0x52/0x360
[  143.056986][ T7113]  sk_prot_alloc+0x101/0x210
[  143.057017][ T7113]  ? sk_alloc+0x27/0x390
[  143.057049][ T7113]  sk_alloc+0x3a/0x390
[  143.057082][ T7113]  __netlink_create+0x62/0x260
[  143.057106][ T7113]  ? __netlink_kernel_create+0xd4/0x720
[  143.057133][ T7113]  __netlink_kernel_create+0x13d/0x720
[  143.057158][ T7113]  ? __kasan_kmalloc+0x93/0xb0
[  143.057189][ T7113]  ? __pfx___netlink_kernel_create+0x10/0x10
[  143.057215][ T7113]  ? __kmalloc_cache_noprof+0x148/0x600
[  143.057240][ T7113]  ? uevent_net_init+0xdb/0x2d0
[  143.057257][ T7113]  ? uevent_net_init+0xdb/0x2d0
[  143.057285][ T7113]  uevent_net_init+0xf9/0x2d0
[  143.057306][ T7113]  ? audit_net_init+0xee/0x200
[  143.057330][ T7113]  ? __pfx_uevent_net_init+0x10/0x10
[  143.057351][ T7113]  ? __pfx_uevent_net_rcv+0x10/0x10
[  143.057372][ T7113]  ? __kmalloc_noprof+0x387/0x710
[  143.057397][ T7113]  ? __kmalloc_noprof+0x1a6/0x710
[  143.057419][ T7113]  ? ops_init+0x7b/0x5d0
[  143.057465][ T7113]  ops_init+0x35d/0x5d0
[  143.057505][ T7113]  setup_net+0x118/0x350
[  143.057535][ T7113]  ? __pfx_setup_net+0x10/0x10
[  143.057563][ T7113]  ? down_read_killable+0x1b6/0x3b0
[  143.057591][ T7113]  ? __ns_common_init+0x384/0x590
[  143.057617][ T7113]  copy_net_ns+0x536/0x770
[  143.057649][ T7113]  create_new_namespaces+0x3f0/0x6b0
[  143.057683][ T7113]  ? security_capable+0x7e/0x2c0
[  143.057712][ T7113]  unshare_nsproxy_namespaces+0x144/0x190
[  143.057748][ T7113]  ksys_unshare+0x532/0x890
[  143.057783][ T7113]  ? __pfx_ksys_unshare+0x10/0x10
[  143.057816][ T7113]  ? rcu_is_watching+0x16/0xb0
[  143.057859][ T7113]  __x64_sys_unshare+0x38/0x50
[  143.057877][ T7113]  do_syscall_64+0x16a/0x530
[  143.057900][ T7113]  ? trace_irq_disable+0x3b/0x140
[  143.057927][ T7113]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.057947][ T7113]  ? clear_bhb_loop+0x70/0xc0
[  143.057971][ T7113]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.057991][ T7113] RIP: 0033:0x00007fe01259fb19
[  143.058015][ T7113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  143.058033][ T7113] RSP: 002b:00007fe013473028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  143.058057][ T7113] RAX: ffffffffffffffda RBX: 00007fe012825fa0 RCX: 00007fe01259fb19
[  143.058072][ T7113] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a000200
[  143.058085][ T7113] RBP: 00007fe012637b70 R08: 0000000000000000 R09: 0000000000000000
[  143.058098][ T7113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  143.058109][ T7113] R13: 00007fe012826038 R14: 00007fe012825fa0 R15: 00007ffd833ade08
[  143.058144][ T7113]  </TASK>
[  143.073762][ T7113] kobject_uevent: unable to create netlink socket!
[  143.111740][ T7051] XFS (loop2): Quotacheck: Done.
[  143.364730][ T5855] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900
[  143.566403][   T55] Bluetooth: hci2: command tx timeout
[  143.574960][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  143.591273][ T5654] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  143.638765][ T1013] hsr_slave_0: left promiscuous mode
[  143.649875][ T1013] hsr_slave_1: left promiscuous mode
[  143.653168][ T1013] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  143.653190][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_0
[  143.678240][ T1013] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  143.678265][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_1
[  143.748450][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  143.774085][ T7122] loop1: detected capacity change from 0 to 512
[  143.885284][ T1013] veth1_macvtap: left promiscuous mode
[  143.885392][ T1013] veth0_macvtap: left promiscuous mode
[  143.885773][ T1013] veth1_vlan: left promiscuous mode
[  143.897648][ T1013] veth0_vlan: left promiscuous mode
[  143.929397][ T7122] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  144.029233][ T7122] EXT4-fs (loop1): 1 truncate cleaned up
[  144.044428][ T7122] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  144.180400][ T5740] usb 1-1: USB disconnect, device number 4
[  144.208942][ T5740] usblp0: removed
[  144.502654][ T5635] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.606358][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  144.900147][ T7136] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  144.903730][ T7136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  144.904108][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  145.055311][ T7140] loop2: detected capacity change from 0 to 2048
[  145.104318][ T7140] NILFS (loop2): invalid segment: Magic number mismatch
[  145.105297][ T7140] NILFS (loop2): trying rollback from an earlier position
[  145.158698][ T7140] NILFS (loop2): recovery complete
[  145.179773][ T7146] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  145.329528][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  145.329664][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  145.331270][ T5855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  145.331472][ T5855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  145.393266][ T1013] team0 (unregistering): Port device team_slave_1 removed
[  145.432044][   T33] kauditd_printk_skb: 17 callbacks suppressed
[  145.432066][   T33] audit: type=1800 audit(1793830442.720:33): pid=7140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.433" name="file1" dev="loop2" ino=12 res=0 errno=-22
[  145.478838][ T1013] team0 (unregistering): Port device team_slave_0 removed
[  145.520671][ T7150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.437'.
[  145.520711][ T7150] netlink: 'syz.3.437': attribute type 29 has an invalid length.
[  145.520726][ T7150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.437'.
[  145.575644][ T7148] NILFS (loop2): nilfs_dat_move: invalid vblocknr = 9, [0, 0)
[  145.575681][ T7148] NILFS error (device loop2): nilfs_bmap_assign: broken bmap (inode number=3)
[  145.646684][   T55] Bluetooth: hci2: command tx timeout
[  145.673400][ T7148] Remounting filesystem read-only
[  145.673467][ T7148] NILFS (loop2): error -5 cleaning segments
[  145.813951][ T7148] NILFS (loop2): error -30 cleaning segments
[  145.942096][ T5654] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer
[  146.035554][ T5654] VFS: Busy inodes after unmount of loop2 (nilfs2)
[  146.035808][ T5654] ------------[ cut here ]------------
[  146.035820][ T5654] kernel BUG at fs/super.c:733!
[  146.035841][ T5654] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  146.059063][ T5654] CPU: 1 UID: 0 PID: 5654 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  146.068557][ T5654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  146.078644][ T5654] RIP: 0010:generic_shutdown_super+0x2ca/0x2d0
[  146.084855][ T5654] Code: 03 42 80 3c 28 00 74 08 4c 89 f7 e8 70 c3 eb ff 49 8b 16 48 81 c3 c0 06 00 00 48 c7 c7 e0 4d 40 8c 48 89 de e8 67 08 d2 fe 90 <0f> 0b 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  146.104503][ T5654] RSP: 0018:ffffc900045cfd10 EFLAGS: 00010246
[  146.110609][ T5654] RAX: 0000000000000030 RBX: ffff8880274526c0 RCX: 90f91788ba412e00
[  146.118617][ T5654] RDX: 0000000000000000 RSI: 8000000000000000 RDI: 0000000000000000
[  146.126629][ T5654] RBP: 1ffff11004e8a4fa R08: ffffc900045cfa87 R09: 1ffff920008b9f50
[  146.134636][ T5654] R10: dffffc0000000000 R11: fffff520008b9f51 R12: 0000000000000000
[  146.142644][ T5654] R13: dffffc0000000000 R14: ffffffff90728ae0 R15: ffff8880274527d0
[  146.150656][ T5654] FS:  000055555654e500(0000) GS:ffff8881234f9000(0000) knlGS:0000000000000000
[  146.159620][ T5654] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  146.166237][ T5654] CR2: 0000001b35120ff8 CR3: 000000005c4f8000 CR4: 00000000003526f0
[  146.174253][ T5654] Call Trace:
[  146.177564][ T5654]  <TASK>
[  146.180526][ T5654]  kill_block_super+0x44/0xa0
[  146.185248][ T5654]  deactivate_locked_super+0xbe/0x110
[  146.190651][ T5654]  cleanup_mnt+0x204/0x2a0
[  146.195094][ T5654]  task_work_run+0x1d9/0x260
[  146.199693][ T5654]  ? __pfx_task_work_run+0x10/0x10
[  146.204816][ T5654]  exit_to_user_mode_loop+0x204/0x770
[  146.210199][ T5654]  ? rcu_is_watching+0x16/0xb0
[  146.214979][ T5654]  do_syscall_64+0x32c/0x530
[  146.219576][ T5654]  ? trace_irq_disable+0x3b/0x140
[  146.224609][ T5654]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.230684][ T5654]  ? clear_bhb_loop+0x70/0xc0
[  146.235365][ T5654]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.241350][ T5654] RIP: 0033:0x00007eff2b5a0d57
[  146.246117][ T5654] Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  146.265813][ T5654] RSP: 002b:00007ffec98e4df8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  146.274243][ T5654] RAX: 0000000000000000 RBX: 00007eff2b636fb3 RCX: 00007eff2b5a0d57
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  146.282318][ T5654] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec98e4eb0
[  146.290302][ T5654] RBP: 00007ffec98e4eb0 R08: 00007ffec98e5eb0 R09: 00000000ffffffff
[  146.298292][ T5654] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffec98e5f40
[  146.306274][ T5654] R13: 00007eff2b636fb3 R14: 0000000000023970 R15: 00007ffec98e5f80
[  146.314253][ T5654]  </TASK>
[  146.317272][ T5654] Modules linked in:
[  146.322596][ T5654] ---[ end trace 0000000000000000 ]---
[  146.346687][ T5654] RIP: 0010:generic_shutdown_super+0x2ca/0x2d0
[  146.346726][ T5654] Code: 03 42 80 3c 28 00 74 08 4c 89 f7 e8 70 c3 eb ff 49 8b 16 48 81 c3 c0 06 00 00 48 c7 c7 e0 4d 40 8c 48 89 de e8 67 08 d2 fe 90 <0f> 0b 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  146.346743][ T5654] RSP: 0018:ffffc900045cfd10 EFLAGS: 00010246
[  146.346777][ T5654] RAX: 0000000000000030 RBX: ffff8880274526c0 RCX: 90f91788ba412e00
[  146.346791][ T5654] RDX: 0000000000000000 RSI: 8000000000000000 RDI: 0000000000000000
[  146.346804][ T5654] RBP: 1ffff11004e8a4fa R08: ffffc900045cfa87 R09: 1ffff920008b9f50
[  146.346817][ T5654] R10: dffffc0000000000 R11: fffff520008b9f51 R12: 0000000000000000
[  146.346830][ T5654] R13: dffffc0000000000 R14: ffffffff90728ae0 R15: ffff8880274527d0
[  146.346844][ T5654] FS:  000055555654e500(0000) GS:ffff8881234f9000(0000) knlGS:0000000000000000
[  146.346881][ T5654] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  146.346895][ T5654] CR2: 00007fce95db4d58 CR3: 000000005c4f8000 CR4: 00000000003526f0
[  146.346916][ T5654] Kernel panic - not syncing: Fatal exception
[  146.448474][ T5654] Kernel Offset: disabled
[  146.452803][ T5654] Rebooting in 86400 seconds..